Dropbox hack hits 5,000 Lenovo-linked accounts

Dropbox said attackers compromised about 5,000 accounts via a legacy Lenovo ID integration, accessing files on fewer than a third. The breach lasted August 4 to 21, and affected accounts lacked two-factor authentication. Dropbox severed the integration and expired all Lenovo-authenticated sessions.