Dropbox data breach compromises 130 GitHub repositories

Top Class Actions’s website and social media posts use affiliate links. If you make a purchase using such links, we may receive a commission, but it will not result in any additional charges to you. Please review our Affiliate Link Disclosure for more information.

Dropbox data breach overview: 

• Who: Dropbox disclosed it was the victim of a data breach that exposed the names and email addresses of a few thousand of its customers and employees. 
• Why: The data breach was the result of a phishing scheme that allowed hackers to gain unauthorized access to 130 code repositories contained in one of Dropbox’s GitHub organizations. 
• Where: Dropbox is used by consumers nationwide. 

Dropbox has disclosed it suffered a data breach that compromised 130 code repositories from one of its GitHub organizations. 

The data breach allowed hackers to gain access to some source code and the personal information of some of Dropbox’s customers and employees, SecurityWeek reports.

Dropbox reportedly announced it learned about the data breach when GitHub informed the company of it Oct. 14. 

GitHub previously sent out a warning that bad actors targeted some of its users with a phishing scheme by pretending to be with CircleCI,  the continuous integration and continuous delivery platform, SecurityWeek reports. 

Hackers reportedly sent phishing emails targeting Dropbox to try to gain access to credentials and one-time passwords needed for multi-factor authentication. 

Dropbox data breach exposes developer-used credentials

Dropbox reportedly says the hackers were unable to successfully gain access to any Dropbox accounts or user passwords or payment information. However, it says the source code that was exposed contained some developer-used credentials. 

The file hosting company says the exposed files contained names and email addresses of a few thousand Dropbox employees, as well as some current and past costumes, sales leads and vendors, SecurityWeek reports. 

In 2011, a consumer filed a class action lawsuit against Dropbox, arguing the company put a bug in its platform that exposed 25 million users’ accounts and data to the public. 

Do you use Dropbox or GitHub? Let us know your thoughts on the data breach in the comments below.

Read About More Class Action Lawsuits & Class Action Settlements:

• U.S. Bank data breach affects about 11,000 customers
• Michigan Medicine data breach exposes health care info of 34K patients
• Drizly CEO named in security order following 2020 data breach
• Advocate Aurora data breach exposes up to 3 million patients’ personal data