Dropbox Data Breach

Dropbox has notified some users of a data breach, stating that their accounts were accessed without authorization between August 4 and August 21, 2026. The breach allowed unauthorized parties to view or download files from the affected accounts. The issue stemmed from a problem with Lenovo's email verification process, which Dropbox uses as an identity provider. This vulnerability enabled an unauthorized party to register a Lenovo ID using a user's email address and then use that ID to log into the associated Dropbox account.