AH Dropbox logo 1.3

7 Million Dropbox Login Credentials Leaked, Dropbox Says It Was Not Hacked

October 14, 2014 - Written By Kristijan Lucic

Security is a big issue nowadays. We live in a time where a huge amount of personal information either travels from one place to another via some sort of messaging service or we store them in one of the currently available cloud services. Either way, it is very important that the information we send / upload stays safe. Unfortunately, it seems nothing can be considered safe lately. We’ve seen a significant amount of breached services in the last couple of months and it seems nobody can actually guarantee our data to stay safe. There are, of course, some actions that we can take in order to really protect our data and that is 2-step verification. Every time you log in on some service you’ll be sent a code via SMS which you’ll then have to enter along with your login credentials. Google, for example, offers such service and I really suggest you try that one out. You can basically find a way to do this for every service you use, some of them actually offer this option in settings, though they implement it differently. There are of course 3rd party solutions for this of course.

That being said, we have yet another case of leaked passwords, this time from Dropbox. Basically, everyone knows what Dropbox is, it’s a cloud service, plain and simple. Dropbox is one of the biggest cloud services around actually, let’s see what’s up. Dropbox has had up to 7 million login credentials (usernames and passwords) stolen, 400 of which were leaked to Pastebin and after receiving some Bitcoin donations, the hacker released more login credentials to the public. Dropbox said that the usernames and passwords were stolen from other services and that the majority of these passwords have expired a long time ago. “Dropbox has not been hacked. These usernames and passwords were, unfortunately, stolen from other services and used in attempts to log in to Dropbox accounts. We’d previously detected these attacks and the vast majority of the passwords posted have been expired for some time now. All other remaining passwords have been expired as well.” said Dropbox.

As I said, it seems like security is becoming a serious issue these days. We’ve seen a bunch of these breaches over the last few months. Google login credentials leaked, Snapchat images leaked, a ton of iCloud-stored celebrity pictures were stolen and now this. Do you rely heavily on cloud services and do you use 2-step verification at all?