We are aware of the issue with the badge emails resending to everyone, we apologise for the inconvenience - learn more here.

Forum Discussion

Natmonster's avatar
Natmonster
Helpful | Level 7
4 years ago

Photographs that are NOT mine in Dropbox - and NOT as a result of using a shared computer!

Hello,

I have discovered a folder in my Dropbox entitled 'Camera Uploads' which is full of hundreds of photos and videos that are not mine. The files are dated from August 2012-November 2013 (which by coincidence is likely to be around about the same time that I set up my Dropbox account). I have not had reason to look in the folder before as I thought it was simply a default folder that Dropbox created on signup.

At first I thought perhaps the folder had been shared with me accidentally but it turns out it is not a shared folder and Dropbox is telling me that the files were uploaded 'by you' (i.e. me!).

Having searched the Dropbox community threads and Google I found someone who had a similar issue and one of the possible reasons given in the thread was that perhaps the user had used a shared computer in the past and left themselves signed into Dropbox and then someone else's phone photos were auto-backed up when they connected. I do not believe this to be the case for me. The reason being is that I looked through all the photos and videos to try to decipher if I knew the owner. I did not. However, one of the photos displayed a gig ticket stub which displayed the surname of the person who bought it - and lo and behold it happens to match my surname. This all seems to point to a scenario where someone with the same name as me was somehow able to sign in to my account and use it to back up their files. Can anyone (at Dropbox or otherwise) explain how this could possibly have happened?

This is surely a security issue. The reason I was poking around in the folders is because I was preparing to start using Dropbox for my business needs but this issue has alarmed me and I now have strong doubts about the security of Dropbox, especially for sharing/storing confidential business files.

BTW I have now changed my password and I was tempted to delete the folder but I feel kind of bad that I now have someone's personal photos (pics and videos of their kids in the school play etc.). I have tried to get in touch with someone at Dropbox but I currently have the basic free account and my options are limited to a chatbot or this forum (another turnoff - I hate when companies make it impossible to contact them!).

Hoping you can help!
Thanks,

Nat

  • Mark's avatar
    Mark
    Icon for Super User II rankSuper User II

    Hi Natmonster 

    They can only be in your account IF a device is connected to your account which has your credentials on it - either via a shared computer OR somebody putting a USB/phone etc. on your computer at some point (and the software just copies them off).

     

    One thing that mayhelp to work things out is go to the Camera Uploads folder, click on one of the files three dots to the right and choose 'restore previous versions'. It MAY tell you what device it came from which could help you work things out.

    • Natmonster's avatar
      Natmonster
      Helpful | Level 7

      Thanks for your input but it does not explain how photographs belonging to someone with the *same name as me* (and someone I definitely do not know) managed to back-up their photos to my account.

      Firstly, I have never had reason to sign into Dropbox outside my home and there are only one or two people at home who would have had access to my own PC over the years. It's simply too much of a coincidence to believe that someone with the *same name as me* who ALSO had access to *my PC/a shared computer I have used* and the result was that their files were inadvertently backed up. I just don't buy it.

      • Mark's avatar
        Mark
        Icon for Super User II rankSuper User II

        The only way is that the person has got access to your username and password, but, thats highly unlikely. 

         

        Also, if the photos are from that long ago its almost impossible to remember who may have used one of your devices for a few seconds. 

         

        Check what devices are on your account at www.dropbox.com/account

  • Laquenta's avatar
    Laquenta
    Helpful | Level 5
    Natmonster! Did you get some resolution on this? I checked My Dropbox today for the first time in many many many years. I logged on due to many emails from dropbox about my space running out soon. The camera upload album was packed with photos from someone else. By the nature of the photos it was someone living far away from me and no relations at all. I found a photo of a car with a licence plate. I checked it in the car register. Lo and behold the car was owned by a person with the same first and last name as me, living in another part of the country.
    • Natmonster's avatar
      Natmonster
      Helpful | Level 7

      Hi Laquenta,

       

      Thanks for your posting. It's so interesting that you've experienced the same problem. It's clearly not a one-off failure on Dropbox's part. The disappointing news is that no, I have not resolved this and what's worse is it's apparent that no one at Dropbox is interested in investigating what amounts to, in my view, a breach of privacy.

      I know that the photos and videos in my Dropbox are not mine (nor were they taken on my camera - there's hundreds of images/vids taken over a period of time), and I know that the person they belong to has the same surname as me but that's as far as I've gotten.

       

      I have come to the conclusion that Dropbox is simply not secure and I would strongly advise against trusting it with private files/files of any value.

      I encourage anyone who may be reading this thread and experiencing the same problem to post about it here. The more information we can gather, the better. I don't know what it will take to get Dropbox to investigate. I am in the UK so GDPR laws apply and now that I have heard from someone else with the same problem, I will likely report this to the ICO.

       

      Natalie

      • Jay's avatar
        Jay
        Icon for Dropbox Staff rankDropbox Staff
        Hi Natmonster, do you have any unknown logins on your account on this page?

        According to the version history on one of the images, what does it say exactly about the upload location when you hover over it?
  • debmahtab's avatar
    debmahtab
    Helpful | Level 5

    Got notice I was out of space in my Dropbox.  I decided to look in the folders and delete some of MY pictures.  I have thousands of pictures that are not mine. I bought this computer new one year ago. I'm so frustrated because you can't email tech support or customer service. I have to INDIVIDUALLY delete each picture.  I need help because I don't want to be forced to buy more space when I have all these random pictures of everything you can think of.  I need help

    • Natmonster's avatar
      Natmonster
      Helpful | Level 7
      It's frustrating to see this is still happening to others and who knows on what scale. Dropbox don't seem to want to address the bug or even acknowledge that there is a problem, instead shifting blame to the users but there clearly is a problem with data security.

      Dropbox offered to take up my query on email and I got an email from a perfectly nice representative but I got no real answers and they failed to get to the bottom of what was causing the problem.

      I would stress to anyone reading this, DO NOT use Dropbox to store files that include sensitive information or that you would not be happy to end up in someone else's hands.
      • debmahtab's avatar
        debmahtab
        Helpful | Level 5

        Thank you for your response, at least I know I'm not the only one. I hate Dropbox! I would like to take it off my computer but don't know what would happen if I did. I guess I'm going to have to pay Geek guys to try to help me figure out what to do w/o Dropbox.  Just awful they offer no help. 

    • Megan's avatar
      Megan
      Icon for Dropbox Staff rankDropbox Staff

      Hi debmahtab, let's look right into this! 

       

      What does your plan page report? Do you have any shared content, that could be counting against your own, personal storage?

       

      Keep me posted!

      • debmahtab's avatar
        debmahtab
        Helpful | Level 5

        I have 0 shared files.  The problem is I'm deleted by month but I have perhaps one of my pictures in there so I can't just delete by the month.  I'm so frustrated I'm thinking of just taking Dropbox off my computer but afraid of what would happen if I did. I have an HP.  I have absolutely no idea where these random pictures of everything you can think of came from. Thanks for your message

  • cathy 11's avatar
    cathy 11
    New member | Level 2

    I just had a similar experience of receiving photos of someone I do not know. I never share my computer, ever. The photos were taken in 2001 and 2002 in Napa, California, at the hot air balloon race. I'm sure they want their old photos but there is no way to know who they are, and Dropbox does not have any way to contact them. I will keep the photos for a while and if I don't hear anything in the next few weeks I will delete the photos. But it's alarming that this could happen. But it seems many other people have had similar experiences.

    • Walter's avatar
      Walter
      Icon for Dropbox Staff rankDropbox Staff

      Hey cathy 11, sorry to hear about this.

       

      Did you check the version history of any of those files to see if you can find more information about when or who/which device uploaded them in the first place?