

However, in 2016 it was revealed that the hack was much larger than previously thought, with a dumped database of 68 million passwords being leaked online that was said to stem from the initial 2012 breach. This prompted Dropbox to add two-factor authentication to account logins.

At the time, Dropbox said the hack provided an intruder with access to documents containing a handful of customer email addresses, which became the target of phishing attacks. The first happened in 2012 when a compromised password was used to access a Dropbox account owned by an employee. Major Dropbox hacks have been few and far between, although those that occur proved to be particularly damaging for the company. Metadata is accessible by employees too, normally as part of tech support. Dropbox employees are unable to view the content of your files, although the company does have the mechanism to access files if required to do so, such as during a legal investigation.
