Dropbox class action claims data breach affects thousands

Dropbox class action overview: 

• Who: Plaintiff Steven Guiffre filed a class action lawsuit against Dropbox. 
• Why: Guiffre claims Dropbox suffered a data breach after not properly protecting customer data. 
• Where: The Dropbox data breach lawsuit was filed in California federal court.

A new class action lawsuit against Dropbox claims the company has failed to properly protect thousands of customers from a data breach.

Plaintiff Steven Guiffre claims in the lawsuit that Dropbox should have done more to protect itself and its customers from a data breach that took place on or before April 24.

The recent breach comes more than a decade after a 2012 Dropbox data breach that impacted 68 million users and was called the largest hack in cloud server history.

The number of users affected by the most recent data breach is unknown, but is estimated to be at least in the hundreds of thousands, according to the new Dropbox class action.

The compromised information included user emails, usernames, phone numbers, hashed passwords, multi-factor authentication and general account settings.

“The PII (personally identifiable information) of Plaintiff and Class Members was compromised through disclosure to an unknown and unauthorized third party—an undoubtedly nefarious third party that seeks to profit off this disclosure by defrauding Plaintiff and Class Members in the future,” the Dropbox data breach lawsuit says.

Dropbox data breach cost customers time, money

The plaintiffs have lost time verifying the legitimacy of the Dropbox data breach, checking their credit, exploring identity theft and credit monitoring services, and seeking legal counsel regarding their options moving forward, the lawsuit says.

“Plaintiff suffered actual injury in the form of damages to and diminution in the value of their PII—a condition of intangible property that they entrusted to Defendant, which was compromised in and as a result of the Data Breach,” the Dropbox class action says.

Dropbox data breach victims are at an increased risk of falling victim to fraud, identity theft and misuse of their information moving forward, the class action says.

Dropbox disclosed in late 2022 that it suffered a separate data breach that compromised 130 code repositories from one of its GitHub organizations, allowing hackers to gain access to some source code and the personal information of some of Dropbox’s customers and employees.

Was your personal information compromised in the 2024 Dropbox data breach? Let us know in the comments.

The plaintiff is represented by Michael R. Reese of Reese LLP and Kevin Laukaitis of Laukaitis Law LLC.

The Dropbox class action lawsuit is Guiffre. v. Dropbox Inc., Case No. 3:24-cv-02794, in the U.S. District Court for the Northern District of California.

Read About More Class Action Lawsuits & Class Action Settlements:

• Ascension Health class action claims cyberattack exposed sensitive patient data
• Panda Express parent faces class action over data breach
• Dell data breach exposes customer names, addresses
• Centennial Bank class actions allege data breach impacted customer info