A post that appeared on Reddit contains links to files of hundreds of Dropbox account usernames and passwords in plain text.
The post contains four Pastebin files containing several hundred usernames and passwords in plain text. The anonymous user who uploaded the files claims to be part of a larger leak and has asked for Bitcoin donations to continue posting.
His message states:
Here is another batch of hacked Dropbox accounts from a total hack of 7,000,000 accounts.
To see more accounts, just search for the term Dropbox hack.
More is coming, just show your support
Reddit users have reportedly confirmed that the credentials circulating online are real, however it is unclear where they came from.
Dropbox, however, in a statement to The Next Web, says that the leaked passwords and usernames were stolen from other third-party services:
Dropbox has not been hacked. These usernames and passwords have unfortunately been stolen from other services that have been used to log in to Dropbox accounts. We have been detecting these attacks (for months) and the vast majority of the passwords published have expired for some time. All other passwords have expired, too.
As an additional preventive measure, Dropbox is forcing users listed in Pastebin files to reset their passwords, according to Reddit users.
However, if you use the service, change your password immediately.
Source: secnews.gr
