Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
Dropbox Sign (formerly HelloSign) data breach (dropbox.com)
13 points by jackconsidine on May 1, 2024 | hide | past | favorite | 3 comments


I use Dropbox Sign API, so a little fearful our private data was accessed.

API keys were leaked as part of this hack. It's unclear from press release if hackers used the API keys to access data/documents of customers.

April 24th they became aware of issue, reporting it over a week later. I'd also be curious on how long this problem went on before being detected on April 24?

I suppose more will come out in the coming days...


[dupe] https://news.ycombinator.com/item?id=40233746

(this item was first, but the other has more traction)


Brutal.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: