Dropbox Smeared in Week of Megabreaches
Summary: LifeLock and MyIdCare.com alerted customers in May 2016 that some 73 million Dropbox usernames and passwords had been exposed, but Dropbox said its initial investigation found no evidence its accounts were impacted. The data was traced to a 2013 Tumblr breach after CSID, an identity monitoring firm being acquired by Experian, sent out the file based on a hacker alias w0rm's Twitter claim without verifying it.
What's compelling: CSID's analysts never tested the credentials and sent the alert on little more than w0rm's say-so, which means a paid threat intelligence feed can hand you a false attribution that carries your brand and your customers' trust with it.
Read the original at Krebs on Security ↗
- Topics
- Detection & Response
- Related
- YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026