Dropbox Security Breach: Hackers Access Accounts Through Authentication Flaw
As reported by Decrypt
Attackers reportedly registered Lenovo IDs using victims’ email addresses, allowing them to sign into existing Dropbox accounts without their passwords.