Dropbox confirms eSign tool hit by major data breach, confirms customer info leaked

Dropbox
Image Credit: Dropbox (Image credit: Image Credit: Dropbox)

E-signature service providers DropBox Sign suffered a cyberattack recently, in which hackers stole some seriously sensitive customer information.

As per the data breach notification published on the DropBox Sign website, an unidentified threat actor managed to compromise a service account that was part of the product’s back-end. The company did not detail exactly how the account was compromised, but it did describe it as a “non-human account used to execute applications and run automated services.”

This account has elevated privileges, which the attacker used to access the production environment, and through it, the customer database.

Responding to the incident

The information within the database includes people’s emails, usernames, phone numbers, hashed passwords, general account settings, API keys, OAuth tokens, and multi-factor authentication (MFA). Even those who never registered an account, but received or signed a document through the service, have had their email addresses and names exposed. 

There is no evidence that the attackers accessed the contents of customer accounts, or payment information, DropBox confirmed. 

The company discovered the breach on April 24, it further explained. In response, it reset user passwords, logged people out of all of their connected devices, and is currently coordinating the rotation of all API keys and OAuth tokens.

The incident has been reported to the police, DropBox concluded. 

If you are a DropBox Sign user, you should delete the MFA configuration from your authenticator apps, and set up the feature again. Also, be on the lookout for any suspicious emails, claiming to come from DropBox Sign, especially if they are demanding urgent action (for example, urgent password resetting). Instead, make sure to visit the DropBox Sign site manually, and reset your login credentials there. 

DropBox Sign prepared a customer FAQ list here, which includes details on how to rotate API keys.

More from TechRadar Pro

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
A fish hook is lying across a computer keyboard, representing a phishing attack on a computer system
Microsoft 365 accounts are under attack from new malware spoofing popular work apps
A digital themed isometric showing a neon padlock in the foreground, and a technological diagram of a processor logic board in the background.
Major breach hits employee screening firm - 3.3 million affected as hackers steal DISA data
Avast cybersecurity
Zapier tells customers their data may have been accessed
A graphic showing someone on a tablet working through a supply chain.
Security issue in open source software leaves businesses concerned for systems
Someone holding a passport with two boarding passes inside it
Top digital loan firm security slip-up puts data of 36 million users at risk
A computer being guarded by cybersecurity.
Wacom warns users their data may have been stolen in breach
Latest in Security
Data leak
Top home hardware firm data leak could see millions of customers affected
Representational image depecting cybersecurity protection
Third-party security issues could be the biggest threat facing your business
A stylized depiction of a padlocked WiFi symbol sitting in the centre of an interlocking vault.
Broadcom warns of worrying security flaws affecting VMware tools
Android Logo
Devious new Android malware uses a Microsoft tool to avoid being spotted
URL phishing
HaveIBeenPwned owner suffers phishing attack that stole his Mailchimp mailing list
Ransomware
Cl0p resurgence drives ransomware attacks to new highs in 2025
Latest in News
Buzz Lightyear Space Ranger Spin Rennovations
Disney’s giving a classic Buzz Lightyear ride a tech overhaul – here's everything you need to know
Hisense U8 series TV on wall in living room
Hisense announces 2025 mini-LED TV lineup, with screen sizes up to 100 inches – and a surprising smart TV switch
Nintendo Music teaser art
Nintendo Music expands its library with songs from Kirby and the Forgotten Land and Tetris
Opera AI Tabs
Opera's new AI feature brings order to your browser tab chaos
An image of Pro-Ject's Flatten it closed and opened
Pro-Ject’s new vinyl flattener will fix any warped LPs you inadvertently buy on Record Store Day
The iPhone 16 Pro on a grey background
iPhone 17 Pro tipped to get 8K video recording – but I want these 3 video features instead