https://pwn.watch/t/dropbox Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Fri, 21 Jun 2024 00:00:00 GMT https://pwn.watch/i/dropbox-sign-production-breach https://pwn.watch/i/dropbox-sign-production-breach Fri, 21 Jun 2024 00:00:00 GMT high <p>A threat actor got into the Dropbox Sign (formerly HelloSign) production environment through a compromised service account in an automated system-configuration tool. It accessed customer emails, usernames, phone numbers, hashed passwords, API keys, OAuth tokens and MFA data. Dropbox reset passwords, logged users out and coordinated rotation of all API keys and OAuth tokens. It found no access to documents or payment information.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> no-fix-needed</p> <p><strong>Latest updates:</strong></p><ul><li>2024-06-21: Dropbox updates its post: investigation concluded, no access to documents or payment info (<a href="https://sign.dropbox.com/blog/a-recent-security-incident-involving-dropbox-sign">source</a>)</li><li>2024-04-24: Dropbox becomes aware of unauthorized access to the Dropbox Sign production environment (<a href="https://sign.dropbox.com/blog/a-recent-security-incident-involving-dropbox-sign">source</a>)</li></ul>