Dropbox hacked?

You probably have read on news portals that Dropbox was hacked and that some user accounts were compromised.

Here is the alleged list of leaked user information. Dropbox is saying that the data is not valid.

Apparently, Dropbox was not hacked. The company is clearly stating this on their blog.

Recent news articles claiming that Dropbox was hacked aren’t true. Your stuff is safe. The usernames and passwords referenced in these articles were stolen from unrelated services, not Dropbox. Attackers then used these stolen credentials to try to log in to sites across the internet, including Dropbox. We have measures in place to detect suspicious login activity and we automatically reset passwords when it happens.

Attacks like these are one of the reasons why we strongly encourage users not to reuse passwords across services. For an added layer of security, we always recommend enabling 2 step verification on your account.

 

I can only confirm and support this suggestion. In the “Improve your security” free eBook is explained how to enable two-factor authentication for several services, including Dropbox and Google Mail.

 

Related Posts

Network Access Control and IoT Security

Network Access Control,  is an approach to computer security that attempts to unify endpoint security technology (such as antivirus, host intrusion prevention, and vulnerability assessment), user or system authentication and network security enforcement. When a computer connects to a computer network, it is not permitted to access anything unless it complies with a business defined […]

Understanding ISO 27001:2022 Annex A.9 – Access Control

We started the ISO 27001:2022 series with the promise of explaining how the 14 categories of controls can be implemented. Today we address ISO 27001:2022 Annex A.9, “Access Control”. Access control is a fundamental component of information security management systems (ISMS). It provides guidelines for implementing controls to ensure that only authorized individuals have access to information […]

Unitymedia is warning customers about default passwords of their routers

Unitymedia has sent a large mailing to their customers having the Ubee Modems requesting them to change the default password of the device. Well, that makes sense if you think that they come with user “admin” and  password “admin”. If you didn’t change the password until now, go here and check the manual.   What bothers me […]