Unauthorized Access to 5,000 Dropbox Accounts via Lenovo Email Verification Exploit

Global cloud storage provider Dropbox disclosed unauthorized access to approximately 5,000 user accounts. Attackers exploited Lenovo's email verification process to create fraudulent Lenovo IDs with victims' email addresses, enabling access to Dropbox accounts without requiring passwords. Files were viewed or downloaded from the affected accounts.