
The dump containing data of more than 68 million user accounts of Dropbox has been published on the Internet, the database contains email addresses, as well as hashed passwords. The company confirmed the fact of publication and notified users about a possible forced reset of the password - reports of this appeared a few days ago, but then the actual extent of the leak was not known.
In a conversation with the Motherboard edition, an unnamed Dropbox employee
confirmed the fact that hackers managed to get hold of relevant data. However, company representatives point out that a significant part of passwords (32 million) are protected using the BCrypt hashing function, which makes it extremely time-consuming to retrieve real passwords. The remaining passwords are protected by the SHA-1 hashing algorithm with salt.
')
The hacking, which led to data leakage, occurred back in 2012 - then Dropbox had to
admit that the attacker managed to acquire the passwords of the company's employees, which allowed them to access the file with the users' email addresses. However, then the company representatives did not say that the hackers were able to steal passwords.
The seriousness of the problem began to clear up only last week, when Dropbox sent users a letter stating that if they have not changed their password since 2012, the next time they log in, they will be asked to change it.

It should be noted that Dropbox was not the first company to undergo a massive data leak. Earlier in the dark Internet dumped data from users of LinkedIn, MySpace, VKontakte and Tumblr.