Ethical Hacking News
Legacy Lenovo login integration breach exposes 5,000 Dropbox accounts to attackers, with around 2,000 users affected. Dropbox has warned its customers to change their passwords and enable two-factor authentication (2FA) to protect their accounts. The breach raises concerns about the security of cloud storage services and highlights the need for robust email verification processes.
A recent breach of a Lenovo login integration has left around 5,000 Dropbox accounts vulnerable to attackers. The vulnerability was caused by an issue with Lenovo's email verification process, allowing attackers to register Lenovo IDs using Dropbox users' email addresses. Attackers accessed files belonging to fewer than a third of the affected users during the 17-day compromise period. Dropbox has advised its customers to change their passwords, enable two-factor authentication (2FA), and take immediate action to secure their accounts. Lenovo has denied that its customers were affected by the breach, but Dropbox has taken steps to sever the link between the affected accounts and Lenovo.
A recent breach of a legacy Lenovo login integration has left around 5,000 Dropbox accounts vulnerable to attackers. The compromised accounts were accessed through an integration that allowed users to access Dropbox using Lenovo IDs. Dropbox has warned its affected customers to change their Dropbox and personal email passwords and enable two-factor authentication (2FA) to protect their accounts.
According to an email sent to the affected customers, Dropbox blamed "an issue with Lenovo's email verification process" for the vulnerability. The email stated that the integration allowed attackers to register Lenovo IDs using Dropbox users' email addresses and then access the corresponding storage accounts. The compromise lasted from August 4 to 21, during which time attackers accessed files belonging to fewer than a third of the affected users.
The breach has raised concerns about the security of cloud storage services and the need for robust email verification processes. Jameson Lopp, co-founder of Bitcoin security company Casa, said that attackers attempted to access just one of his files, "IMPORTANT.rtf," which had been encrypted locally before it was uploaded to Dropbox. Lopp's experience highlights the importance of enabling 2FA to protect against such attacks.
Dropbox confirmed the scale of the attack to Reuters and stated that none of the affected accounts had 2FA enabled. In response to the breach, Dropbox "promptly expired all sessions logged in through Lenovo IDs" and "severed any link" between the affected accounts and Lenovo. The company has advised its customers to take immediate action to secure their accounts.
Lenovo has denied that its customers were affected by the breach, stating that its investigation was ongoing. The Register has asked Dropbox and Lenovo for more information regarding the breach, but no further details have been released.
The compromise serves as a reminder of the importance of robust security measures, including email verification processes and 2FA. It also highlights the need for cloud storage services to prioritize the security of their users' accounts. In this case, Dropbox has taken steps to rectify the situation, but the incident underscores the importance of vigilance in the face of emerging security threats.
Related Information:
https://www.ethicalhackingnews.com/articles/Legacy-Lenovo-Login-Integration-Compromise-Exposes-5000-Dropbox-Accounts-to-Attackers-ehn.shtml
https://www.theregister.com/security/2026/09/02/legacy-lenovo-login-opens-5000-dropbox-accounts-to-attackers/5293924
https://securityshelf.com/2026/09/02/legacy-lenovo-login-opens-5000-dropbox-accounts-to-attackers/
Published: Wed Sep 2 10:24:26 2026 by llama3.2 3B Q4_K_M
