Hackers have reportedly compromised 7 million Dropbox accounts, but the file hosting service maintains it wasn’t hacked and that the accounts were farmed from third-party services.
“Dropbox has not been hacked,” the company said in a prepared statement issued to press. “These usernames and passwords were unfortunately stolen from other services and used in attempts to log in to Dropbox accounts. We’d previously detected these attacks and the vast majority of the passwords posted have been expired for some time now. All other remaining passwords have been expired as well.”
Revelations of the breaches came when the alleged hackers began posting links on a popular online forum to Pastebin dumps containing the email addresses and passwords of hundreds of compromised accounts.
Dropbox users are encouraged to change account passwords and enable two-step verification as outlined on the official website. Dropbox is available for Windows PC, Mac, Linux, Android, iOS, BlackBerry OS and web browsers, along with unofficial Symbian, Windows Phone and MeeGo ports.
We've reached out to Dropbox Inc and will update this post accordingly.
