TLDR InfoSec · ATTACKS & VULNERABILITIES
DROPBOX SAYS HACKERS STOLE CUSTOMER DATA AND AUTH SECRETS FROM ESIGNATURE SERVICE
Summary from the TLDR InfoSec newsletter
Dropbox reported a breach of its Dropbox Sign signature platform. Attackers gained access to authentication tokens, MFA keys, hashed passwords, and customer information. Dropbox says that the attackers gained access through a backend system configuration tool.