One of the most popular cloud storage platform has been hacked as some of the users who have not activated two-factor authentication have had their credentials posted on the internet. According to a document posted on pastebin today, over 400 Dropbox usernames and passwords have been leaked, and the leaker claims that these are just a tiny fraction of the several hacks that compromises up to 7 million accounts. The hacker is requesting for Bitcoin donations in exchange for more accounts, and seems he is to soon post another batch of log-in credentials within the same day. No one knows how this hacker got a hold of the usernames and passwords, but the cloud service has told Engadget that Dropbox itself has not been hacked.
The dropbox spokes person said
“These usernames and passwords were unfortunately stolen from other services and used in attempts to log in to Dropbox accounts, We’d previously detected these attacks and the vast majority of the passwords posted have been expired for some time now. All other remaining passwords have been expired as well.”
To be on the safe side and you own a Dropbox account, go to the Dropbox’s detailed explanation on how to turn on two-step authentication.