Posted by tranced
Maybe this will put an end to all that "Dropbox of the Enterprise" talk by cloud storage providers.
On Monday night, Dropbox acknowledged that spam mailings afflicting users starting a few weeks ago happened when hackers used passwords obtained from third-party sites to access "a small number" Dropbox user accounts. The company called in outside experts to help its security pros and here's what they discovered, according to the Dropbox blog.
Our investigation found that usernames and passwords recently stolen from other websites were used to sign in to a small number of Dropbox accounts. We've contacted these users and have helped them protect their accounts.
A stolen password was also used to access an employee Dropbox account containing a project document with user email addresses. We believe this improper access is what led to the spam. We're sorry about this, and have put additional controls in place to help make sure it doesn't happen again.
Read more...
[ This Message was edited by: laffen on 2012-12-15 12:49 ]