Breachesby GlyphDropbox
Disclosed Sep 2, 20265,000 affectedUnverified
Lenovo ID verification flaw let attacker access about 5,000 Dropbox accounts
Dropbox notified users that a flaw in Lenovo's email verification let an attacker register Lenovo IDs with victims' emails and sign into about 5,000 linked Dropbox accounts between August 4 and 21, viewing and downloading some content.
What is known
| People affected | 5,000 (as reported by the organization) |
|---|---|
| Disclosed | Sep 2, 2026 |
| Attack | Vendor breach |
| Data exposed | Other |
| Sector | Tech · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
Notices filed
Other breaches at Dropbox
Material cybersecurity incident reported to the SEC (8-K Item 1.05)Material cybersecurity incident reported to the SEC (8-K Item 1.05)TechUSMay 1, 2024Phishing attack lets hacker steal 130 Dropbox GitHub repositoriesPhishing exposed source code and API keys.PhishingTechUSUnverifiedNov 1, 2022Stolen employee password leads to Dropbox user email theft; 68M credentials later leakCredential stuffing exposed emails and passwords.Credential stuffing69M affectedTechUSJul 31, 2012
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.