EP. 155: Hackers Breach 5,000 Dropbox Accounts Without Passwords

The Digital Warfare Podcast · Sep 2, 2026 · 4m · transcript

Summary

Approximately 5,000 Dropbox accounts were compromised after attackers exploited an issue involving Dropbox's legacy authentication integration with Lenovo ID. Unauthorized access occurred between August 4 and August 21, 2026.

According to Dropbox, Lenovo's email-verification process allowed an unauthorized party to register a Lenovo ID using another person's email address. The fraudulent Lenovo identity could then be used to authenticate to the Dropbox account associated with that same email address without knowing the victim's Dropbox password.

Affected accounts did not have Dropbox…