Are you ready to bring more awareness to your brand? Consider becoming a sponsor for The AI Impact Tour. Learn more about the opportunities here.

Updated 8:30pm Pacific with Dropbox’s response.

Hundreds of alleged usernames and passwords for Dropbox have been published on Pastebin, an anonymous information-sharing site.

Sample of usernames and passwords allegedly stolen from Dropbox.

Above: Sample of usernames and passwords allegedly stolen from Dropbox.

Image Credit: Screenshot

The apparent hackers claim to have nabbed 6,937,081 passwords and today published a “teaser” of 400 username-password pairs. They requested donations in Bitcoin and promised to release more passwords based on how much of the virtual currency they receive. The usernames appeared in alphabetical order starting with and ending with

Dropbox, however, says the hack is bogus. The company offered VentureBeat this response to our inquiry:

VB Event

The AI Impact Tour

Connect with the enterprise AI community at VentureBeat’s AI Impact Tour coming to a city near you!


Learn More

Dropbox has not been hacked. These usernames and passwords were unfortunately stolen from other services and used in attempts to log in to Dropbox accounts. We’d previously detected these attacks and the vast majority of the passwords posted have been expired for some time now. All other remaining passwords have been expired as well.

Subsequently, two more “teasers” appeared on Pastebin.

A Reddit thread first mentioned the apparent leak about three hours ago. The Reddit user who first submitted the link later said that usernames and passwords in the file actually did work.

Dropbox posted a warning against phishing scams on October 9.

While this hack may not be legitimate, and even though Dropbox says it expired most of these passwords long ago, the fact that someone on Reddit is claiming that the passwords do work is cause for concern.

It’s probably a good idea to change your password just to be safe — especially if you use the same password on multiple sites — and enable two-factor authentication, which Dropbox now supports. 

Via The Next Web

VentureBeat's mission is to be a digital town square for technical decision-makers to gain knowledge about transformative enterprise technology and transact. Discover our Briefings.