Dropbox Becomes Victim of Hacking, Customers' Personal Data Affected

Liputan6.com, Jakarta – Cloud storage service provider Dropbox revealed that their Dropbox Sign service (formerly known as HelloSign) was the victim of a hack by hackers.

Dropbox Sign is a digital signature product from Dropbox. Quoting page HackerNewsFriday (3/5/2024), this group accessed email addresses, usernames and connected general accounts belonging to all users of this product.

In a filing with the United States Securities and Exchange Commission (SEC), Dropbox said it became aware of the unauthorized access on April 24, 2024.

For your information, Dropbox previously announced its plans to acquire the HelloSign service in January 2019.

“The threat actor has accessed data related to all Dropbox Sign users, such as emails and usernames, in addition to general account settings,” Dropbox said in a filing with the SEC.

For certain users, the hackers also accessed phone numbers, hashed passwords, and certain authentication information. For example API keys, OAuth tokens and multi-factor authentication.

Worse yet, the intrusion or attempt to enter without consent by hackers also affected third parties who received or signed documents via Dropbox Sign, but never created their own accounts, but specifically disclosed their names and addresses.

World Bank data shows digital entrepreneurship paves the way for economic empowerment, and internet access has reduced poverty in Nigeria. But according to the World Bank, there is still a digital gender gap because women are less likely to…