Dropbox resets passwords
Dropbox has confirmed that a leak of 68 million accounts is real, and said it was taking precautionary measures to ensure users’ files remain safe.
“Based on our analysis, the credentials were likely obtained in 2012,” said Dropbox.
“The list of email addresses with hashed and salted passwords is real, however we have no indication that Dropbox user accounts have been improperly accessed.”
Dropbox said it mailed the users it believed were affected and did a password reset for anyone who hadn’t updated their password since mid-2012.
“This reset ensures that even if these passwords are cracked, they can’t be used to access Dropbox accounts.”
“If you signed up for Dropbox before mid-2012 and reused your password elsewhere, you should change it on those services.”
More on Dropbox
Facebook Messenger gets Dropbox file sending and preview
Dropbox introduces U2F support for secure authentication