We are aware of the issue with the badge emails resending to everyone, we apologise for the inconvenience - learn more here.
Information regarding your Dropbox Sign (formerly HelloSign).
I got this email today. Is this legitimate? From No-reply@em-s.dropbox.com May 5,2024 Information regarding your Dropbox Sign (formerly HelloSign) Hello, We’re reaching out because on April 24th, we became aware of unauthorized access to the Dropbox Sign (formerly HelloSign) production environment. Upon further investigation, we discovered that a threat actor had accessed Dropbox Sign customer information. You are receiving this message because your information was in the data the third party accessed. What happened We can confirm that Dropbox Sign customer information such as emails, usernames, phone numbers, hashed passwords, multi-factor authentication, and general account settings were obtained. Based on our investigation, there is no evidence of unauthorized access to the contents of customers’ accounts (i.e. their documents or agreements), or their payment information. What we’re doing When we became aware of this issue, we launched an investigation with industry-leading forensic investigators to understand what happened and mitigate risks to our users. In response, our security team reset users’ passwords, logged users out of any devices they had connected to Dropbox Sign. What you can do Passwords and multi-factor authentication: We’ve expired your password and logged you out of any devices you had connected to Dropbox Sign to further protect your account. The next time you log in to your Sign account, you’ll be sent an email to reset your password. Customers who use an authenticator app for multi-factor authentication should reset it as soon as possible. Please delete your existing entry and then reset it. If you use SMS you do not need to take any action. If you reused your Dropbox Sign password on any other services, we strongly recommend that you change your password on those accounts and utilize multi-factor authentication when available. Instructions on how to do this for your Dropbox Sign account can be found here. At Dropbox, our number one value is to be worthy of trust. We hold ourselves to a high standard when protecting our customers and their content. We didn’t live up to that standard here, and we’re deeply sorry for the impact it caused our customers. We are grateful for your partnership, and we’re here to help all of those who were impacted by this incident. For more information on this incident, how to contact us, and updates see here. - The Dropbox team
My templates and history of signed documents have disappeared after resetting Sign password
After resetting the password as recommended after the Dropbox Sign security incident. All the account data has disappeared, including the contracted plan and my payment method. It looks like a newly created account.
My Dropbox Sign admin account has been hacked
Many Docusign requests have been sent from the Admin account of a user that is no longer with our company. When I attempt to log in using the email address for the Admin Account I get a message saying that there is no account with that email address. I have the most recent invoice, but niow I cannot access the account and stop the thousands of invalid signature requests. How can I get someone to help solve this issue?
No access to old dropbox account. Last used probably 2 years ago..
I have tried to access today my old dropbox (looking for a copy of some old messages from over 10 years ago). Account was set up around 2008-2009 and I accessed this it last time approx 2 years ago. I do have my login and password and I am sure they are correct. Account seems still active but attempting to login I get message "We sent a code to xxx@xxx.xxx.xxx and any devices you’ve linked to this account. Enter the code to continue." I do NOT have access to this email address. Email server is not active anymore and domain name of that email server expired while ago. Last time I logged in to this dropbox account (approx 2 years ago), it just let me in with login and password without asking for email codes or anything. From memory there was not much stuff left on that account anyway.. But it would be handy to re-gain access anyway. Any ideas at all? I may still have some old harddrive with windows installation or old mobile phone knocking about that had dropbox installed and were likely logged into this account... would that work? or is it wasting time and would ask me for e-mail code too upon trying to connect? regards Sebastian
