{
  "id": 5141916,
  "title": "Over 5,000 Dropbox accounts have been hacked, and the attackers only needed an email address",
  "url": "https://urgent.news/2026/09/02/over-5-000-dropbox-accounts-have-been-hacked-and-the-attackers-only",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-02T18:05:00.000Z",
  "source": {
    "name": "TechRadar",
    "slug": "techradar",
    "url": "https://www.techradar.com/pro/security/over-5-000-dropbox-accounts-have-been-hacked-and-the-attackers-only-needed-an-email-address"
  },
  "original_language": "en",
  "account": "A security flaw in Lenovo's email verification process allowed hackers to hijack around 5,000 Dropbox accounts. All that the criminals needed was the victims' email addresses. The attack occurred between August 4 and 21, and most compromised accounts lacked two-factor authentication (2FA). Dropbox ended Lenovo ID logins, expired sessions, and urged users to change their passwords and enable 2FA. Muhammad Yahya Patel, vCISO and cybersecurity advisor for EMEA at Huntress, emphasized that the vulnerability highlights the importance of auditing third-party services that have authentication access to personal accounts.",
  "summary": "A bug in Lenovo's ID verification system made it possible to access Dropbox accounts, but the bug has since been fixed.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}