Ask HN: Has Dropbox been compromised recently?

2 points by alrtd82 10 years ago | 1 comment

I just received an alert from a (paid) Internet surveillance service, stating:

Site WWW.DROPBOX.COM

"Your email address has been found compromised online. We monitor online properties to identify the illegal trading and selling of your personal information, and unfortunately we have found a match that may indicate possible identity theft."

I closed Dropbox a while ago, and the pwd was a randomly generated one. False positive or a hack surfacing just now? Anyone noticed suspicious activity related to their Dropbox account ?

seanieb 10 years ago |

No. There have been a bunch of "leaks"/"dumps" claiming to be from Dropbox posted on pastebin for the last two years or so. Most are just rehashed from other pw dumps.

Troy hunt: https://twitter.com/troyhunt/status/599150465335431169

And this latest FUD came from leakedsource.com, who published a list that was claiming to be Dropbox usernames and hashes, but if they did their due diligence they would have notice that the list was in fact Tumblr. They issued a correction later:

https://twitter.com/LeakedSource/status/732225976210472961