Skip to Main Content

Hundreds of Alleged Dropbox Passwords Leaked, Change Yours Now


An anonymous hacker is claiming to have leaked a few hundred usernames and passwords for Dropbox accounts. It's unclear where they actually came from (and if they really are Dropbox credentials), but either way: it's time to change your passwords.

The leak, which contains hundreds of accounts with email addresses starting with the letter "b", come from an anonymous user taking Bitcoin donations for the full leak, which they claim consists of millions of accounts, according to The Next Web. We're not sure how old these credentials are or which third party apps they came from, but no matter what, it's time to do the same old song and dance we're pretty used to by now.

So, if you use Dropbox, be sure to change your password now (and make it strong), as well as your password on any other site that used the same credentials. While you're at it, you should definitely enable two-factor authentication to keep ne'er-do-wells out of your account (even if your password is leaked).

If your account was one of the "B" accounts already leaked, you should get a notification from Dropbox to reset your account. But in the meantime, we recommend everyone change their passwords. Hit the link to read more.

Update: Dropbox released a statement on their blog saying that they were not hacked, and that the leaked credentials likely came from third-party services (as suspected):

Recent news articles claiming that Dropbox was hacked aren't true. Your stuff is safe. The usernames and passwords referenced in these articles were stolen from unrelated services, not Dropbox. Attackers then used these stolen credentials to try to log in to sites across the internet, including Dropbox. We have measures in place to detect suspicious login activity and we automatically reset passwords when it happens.

They claim the passwords have expired, but no matter what, you should change your password. We still don't know enough about the hack to recommend otherwise.

Hundreds of Dropbox Passwords May Have Leaked Online in Alleged Hack | The Next Web via Gizmodo