Dropbox Says Lenovo ID Flaw Compromised 5,000 Accounts

Dropbox confirmed this week that attackers compromised roughly 5,000 user accounts during a 17-day intrusion between Aug. 4 and Aug. 21, 2026, with files viewed or downloaded in fewer than a third of them. The attackers did not need victims’ Dropbox passwords or direct access to Dropbox’s servers. Instead, they exploited a weakness in Lenovo’s...