Dropbox Breach Exposes Customer Credentials, Authentication Data

Threat actor dropped in to Dropbox Sign production environment and accessed emails, passwords, and other PII, along with APIs, OAuth, and MFA info.

https://www.darkreading.com/application-security/dropbox-breach-exposes-customer-credentials-authentication-data