A legacy Lenovo login integration exposed around 5,000 Dropbox accounts to attackers, prompting the cloud storage firm to sever the old integration and urge affected users to reset credentials.
Dropbox has cut off a legacy Lenovo login integration after it was found to have left around 5,000 accounts open to attackers. The cloud storage provider has urged affected users to reset their credentials.
The issue stemmed from an older authentication link with Lenovo, which has now been disabled. Dropbox acted after the vulnerability came to light, though the exact method of exploitation has not been detailed.
Why this matters: The incident highlights the risk posed by outdated third-party login integrations, which can expose user accounts if not properly maintained.
What this means for you: If you use Dropbox and previously linked a Lenovo account, you should reset your password as a precaution.
Join thousands of readers getting the best of British news straight to their inbox.