Dropbox is warning about 5,000 users that attackers have accessed their accounts without using a password.
The company says the access ran from August 4th to August 21st and hit only accounts that did not use multi-factor authentication, reports Reuters.
Dropbox had a shortcut that let people open their files with a Lenovo login instead of a Dropbox password.
Attackers were able to create Lenovo logins with Dropbox users’ email addresses, and Lenovo did not check those emails well enough.
Dropbox then treated that Lenovo login as the real user, even if the person had never used a Lenovo product.
Files were viewed or downloaded from about 1,500 of the accounts.
Dropbox cut off those login sessions, turned off the Lenovo sign-in option and now requires a Dropbox password. It has emailed the people affected and told regulators. The company says it does not expect a material hit to the business.
Lenovo says the problem was a “legacy integration” that “could be used to improperly authenticate certain Dropbox accounts.” It says its own users are not affected and that its investigation is still open.
Follow us on X, Facebook and Telegram
Don’t Miss a Beat – Subscribe to get email alerts delivered directly to your inbox
 
Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any assets including cryptocurrencies, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.
Generated Image: Midjourney
The post Dropbox Says Hackers Accessed About 5,000 Accounts Without Passwords appeared first on The Daily Hodl.
Dropbox is notifying users of unauthorized access to roughly 5,000 accounts through a legacy Lenovo ID integration that bypassed passwords for those without MFA.
The post Dropbox Says Hackers Accessed About 5,000 Accounts Without Passwords appeared first on The Daily Hodl. Scams, Hacks & Breaches, breach, Dropbox, Hack, News
This articles is written by : Nermeen Nabil Khear Abdelmalak
All rights reserved to : USAGOLDMIES . www.usagoldmines.com
You can Enjoy surfing our website categories and read more content in many fields you may like .
Why USAGoldMines ?
USAGoldMines is a comprehensive website offering the latest in financial, crypto, and technical news. With specialized sections for each category, it provides readers with up-to-date market insights, investment trends, and technological advancements, making it a valuable resource for investors and enthusiasts in the fast-paced financial world.