These usernames and passwords were unfortunately stolen from other services and used in attempts to log in to Dropbox accounts.” These “other services” remain a mystery, however, since Dropbox has no idea where the credentials came from. Then, they released a statement to Techly, saying “Dropbox has not been hacked.

When news of the leak went public, Dropbox reset all user passwords. This means a Dropbox leak could have happened at either the user end or if hackers gained access to company servers - Dropbox maintains this never occurred. More importantly, Dropbox has both user data and passwords on-hand other services like SpiderOak say they keep no readable version of this information on their machines. Although they’ve beefed up their service to include encryption for files on their servers and in transit, they don’t offer any kind of protection for files on user computers.

It’s not difficult to see possible hack architecture here: as noted by Edward Snowden, the cloud service is light on encryption. “More to come,” it promises, “keep showing your support.” According to The Next Web, Reddit users allegedly confirmed the hacked credentials were legitimate, but had no way to tell if Dropbox was to blame. “Here is another batch of Hacked Dropbox accounts from the massive hack of 7,000,000 accounts” says a Pastebin message in one of the leak threads. So what’s the bottom line - is Dropbox nothing more than soggy cardboard, or a convenient target for leak scams? Easy access Now, links to hundreds of Dropbox usernames and passwords have appeared on a Reddit thread, with a call to donate Bitcoins if interested parties want to see more.īut the company says their servers are safe, instead pointing the finger at third-party services and reused passwords. In a recent interview, the NSA whistleblower warned cloud storage users to avoid Dropbox because the service doesn’t use encryption. This post was originally published on October 17, 2014.

Dropbox leaks thread