{
  "id": 5011078,
  "title": "Dropbox breach compromises 5,000 accounts through Lenovo ID loophole",
  "url": "https://urgent.news/2026/09/02/dropbox-breach-compromises-5-000-accounts-through-lenovo-id-loophole",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-02T04:26:30.000Z",
  "source": {
    "name": "Malay Mail",
    "slug": "malay-mail-malaymail",
    "url": "https://www.malaymail.com/news/tech-gadgets/2026/09/02/dropbox-breach-compromises-5000-accounts-through-lenovo-id-loophole/233630"
  },
  "original_language": "en",
  "account": "SAN FRANCISCO, Sep 2 — Unauthorized access to around 5,000 Dropbox accounts occurred in August, according to reports from Reuters and Bloomberg. The breach transpired between August 4 and August 21, during which hackers viewed and downloaded files. The affected accounts lacked multi-factor authentication and were connected to Lenovo IDs. The authentication system flaw was identified in Lenovo's email verification process. Hackers exploited this vulnerability to create Lenovo IDs through the email addresses of unsuspecting Dropbox users who hadn't registered for the service. Dropbox promptly terminated all Lenovo ID-authenticated sessions, severed the connections between the two platforms, and enforced password entry for account access through Lenovo. The company notified regulators and affected users upon discovering the breach. Lenovo disclosed a \"legacy integration\" with Dropbox that could enable unauthorized authentication of certain accounts. The company affirmed that no other customer data was compromised and that it is collaborating with Dropbox to alleviate the risk while the investigation proceeds.",
  "summary": "SAN FRANCISCO, Sept 2 — Online file storage and sharing service Dropbox accounts were compromised last month after...",
  "key_points": [
    "Unauthorized access to 5,000 Dropbox accounts occurred in August.",
    "Hackers exploited Lenovo ID authentication flaw to access files.",
    "Dropbox terminated Lenovo ID sessions and notified regulators."
  ],
  "editors_take": "The breach shows that a vulnerability in one company's system can compromise accounts on another platform, highlighting the risks of interconnected authentication systems and the need for robust security measures.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}