Dropbox Security Breach: Hackers Access Accounts Through Authentication Flaw
Attackers reportedly registered Lenovo IDs using victims’ email addresses, allowing them to sign into existing Dropbox accounts without their passwords.
We haven't written up this one. Decrypt has the full story — the link below goes straight to it.