logo

Dropbox Github breach (Incident)

ID: 6e6d31f4-eb3f-5a8b-b0e0-6c4451bd9b42

STIX ID: report--6e6d31f4-eb3f-5a8b-b0e0-6c4451bd9b42

Feed Name: Wiz Cloud Threat Landscape

Threat Score
65/100

Date Published: 2022-11-01

Date Updated: 2026-05-01

Author: [email protected] (Wiz Threat Research)

...
...

### Executive summary Dropbox disclosed a breach in which attackers phished employees by impersonating CircleCI, obtaining GitHub credentials and hardware-based OTPs to steal 130 repositories from a Dropbox GitHub account; the repositories included API keys, internal tools, and configuration files, but no customer accounts, passwords, payment information, core apps, or infrastructure were compromised.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.