Dropbox Breach Exposes Customer Credentials, Authentication Data

Dropbox Sign experienced a production-environment breach after a threat actor compromised an automated system configuration service account. The actor accessed the customer database and exposed user emails, usernames, phone numbers, hashed passwords, API keys, OAuth tokens, and MFA details; Dropbox says document contents and payment information were not accessed. Dropbox has reset user passwords, logged out sessions, and is rotating API keys and tokens while notifying affected users and advising password changes and MFA use.