API keys
Security incidents tagged API keys. Newest first.
0 API keys incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 1
- Live
- 0
- Patched
- 1
- Days without an incident
- 911
- Longest quiet run: 853 days (Jun 22–Oct 22)
Show 1 older incident1 older incident
April 2024 1
HighDropbox Sign (HelloSign) production environment breachedNo fix needed
Dropbox Sign No fix needed
A threat actor got into the Dropbox Sign (formerly HelloSign) production environment through a compromised service account in an automated system-configuration tool. It accessed customer emails, usernames, phone numbers, hashed passwords, API keys, OAuth tokens and MFA data. Dropbox reset passwords, logged users out and coordinated rotation of all API keys and OAuth tokens. It found no access to documents or payment information.
