Approximately 5,000 Dropbox accounts were compromised between August 4 and August 21, 2026 after hackers exploited an authentication flaw linked to Lenovo ID. The vulnerability stemmed from Lenovo’s email verification process, which allowed unauthorized parties to register Lenovo IDs using other people’s email addresses and then access their associated Dropbox accounts. Dropbox stated that there was no evidence files were viewed or downloaded in most cases, with less than a third of affected accounts experiencing such access. The platform has since changed how Lenovo IDs can access accounts. Affected users were notified by email.
Source: Read the original article
