{"id":5399,"date":"2012-08-02T10:21:01","date_gmt":"2012-08-02T17:21:01","guid":{"rendered":"http:\/\/www.intego.com\/mac-security-blog\/?p=5399"},"modified":"2023-08-18T09:05:02","modified_gmt":"2023-08-18T16:05:02","slug":"latest-dropbox-security-snafu-reminds-us-websites-arent-bullet-proof","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/latest-dropbox-security-snafu-reminds-us-websites-arent-bullet-proof\/","title":{"rendered":"Latest Dropbox Security Snafu Reminds Us Websites Aren’t Bulletproof"},"content":{"rendered":"

Earlier this month, Dropbox was investigating an issue<\/a> where users were receiving spam at email addresses they only used for Dropbox. Initially they had said that there was no sign that this was due to a breach, but now it looks like their story is changing<\/a>.<\/p>\n

Presently the explanation is that there were a number of Dropbox accounts that were hacked due to usernames and passwords being reused from another site that was breached. One of those accounts was from an employee that was storing a document that contained email addresses of Dropbox users.<\/p>\n

People seem to think security issues won\u2019t happen to them because they\u2019re too unimportant to be targeted. But it\u2019s unlikely that this employee was a high level manager \u2013 it was probably someone in the trenches who deals directly with customers. And yet the information stolen from this employee has led to a big PR headache for Dropbox that has required them to make some big and expensive changes to their security policy. Not that the changes weren\u2019t called for in the first place \u2013 but it has forced their hand, and expedited action is never cheap.<\/p>\n

None of us is too unimportant to bother with security. We all need to guard our information, especially if we\u2019re putting it in the Cloud. It\u2019s irrelevant whether you think the data is valuable; the odds are that someone else can find a way to make a buck off it. So here\u2019s your security moral for the day:<\/p>\n