4 ms·
I've been waiting for light to be shed on this incident for a long time, as I have known for years and with zero doubt that invented email addresses used only f
by alanh 10y ago
I've been waiting for light to be shed on this incident for a long time, as I have known for years and with zero doubt that invented email addresses used only for Dropbox must have been stolen from Dropbox. I have said so, publicly, too, but I never heard Dropbox admit to a serious incident like this.
- an_account 10y agoDropbox admitted in 2012 that the emails were stolen. The new information coming to light now is that encrypted passwords were also leaked. Exact phrasing from 2012 blog post: >A stolen password was also used to access an employee Dropbox account containing a project document with user email addresses. We believe this improper access is what led to the spam. We’re sorry about this, and have put additional controls in place to help make sure it doesn’t happen again.
- deleted 10y ago[deleted]
- jacquesm 10y ago> A stolen password was also used to access an employee Dropbox account containing a project document with user email addresses. The fact that such a document can even exist is plenty of reason to worry about processes and access at dropbox.