Item105 Crowdsource Database

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Dropbox, Inc ======

On May 1, Dropbox reported unauthorized access to its Dropbox Sign product (that they acquired from DocuSign). Dropbox reported that the intruder accessed Dropbox Sign usernames and email addresses for all Sign users and gained additional access to information (e.g., hashed passwords, API keys, etc) for a subset of Sign users. Dropbox reported that the intruder's access was limited to their Sign infrastructure and that their investigation is continuing. Ultimately, Dropbox reported that they did not believe that the intruder's unauthorized access would have an affect on its overall business but they said that they "remain subject to various risks due to the incident, including potential litigation, changes in customer behavior, and additional regulatory scrutiny."

==== Details ====
^ Data      ^         ^
| Filing Date/Time    | 01/05/2024 at 20:36GMT (16:36 EDT) |
| Link | [[https://www.sec.gov/Archives/edgar/data/1467623/000146762324000024/0001467623-24-000024-index.htm|Edgar Data]] |

==== Coverage ====

^ Organization      ^ Headline        ^ Date ^ URL ^
| WSJ  | //Dropbox Reports Cyberattack on Dropbox Sign Product//  | 01/05/2024 at 10:00 GMT (4:00pm EDT) | [[https://www.wsj.com/articles/dropbox-reports-cyberattack-on-dropbox-sign-product-e1765b32|URL]] |
| Malware Bytes | //Dropbox Sign customer data accessed in breach//  | 02/05/2024 | [[https://www.malwarebytes.com/blog/news/2024/05/dropbox-sign-customer-data-accessed-in-breach|URL]] |