Learn how to make the most out of the Dropbox Community here 💙.
Forum Discussion
Employee Compromised Account
I have an employee here that signed up for a free DropBox account with their work email. The account has been compromised and the MFA phone number has been changed, so even though I can get a passwor...
We are experiencing the same issue. Our staff members mailbox was temporarily compromised, during which the attacker logged in to their Dropbox and set up a 2FA Authenticator App.
We reset the password but cannot actually log in without the 2FA or recover code - of which we have neither. The attackers session is still active, so they're sending out fraudulent emails with malicious payloads.
If we could simply terminate all active sessions this would fix the issue, but we can only do that by logging in (chicken & egg situation). We logged a ticket with Dropbox asking they do this for us, but they have not responded.
This is a disaster, and SHAME on Dropbox for allowing this kind of situation to occur. At the very least terminate all the current sessions when the password is reset! Crazy.
If ANYONE at Dropbox cares, because our clients certainly do, the ticket number is: 22934270
Helen DBX
Dropbox Staff
Dropbox StaffHey there,
Helen from Dropbox here.
A security specialist has just responded to your ticket. Please have a look and we will take care of that for you.
Best regards,
Helen
The Dropbox Team
https://www.dropbox.com/help
