<story><title>A recent security incident involving Dropbox Sign</title><url>https://sign.dropbox.com/blog/a-recent-security-incident-involving-dropbox-sign</url></story><parent_chain></parent_chain><comment><author>dml2135</author><text>This is Dropbox Sign, not Dropbox. It’s a document signing product akin to Docusign, and was called Hellosign before Dropbox acquired them.&lt;p&gt;We are a customer of theirs at my startup, and as far as I can tell Dropbox has made very few changes since the acquisition beyond changing the branding. So I wouldn’t take this incident to be an indicator of much on the cloud-storage side of the company.</text></comment>
<story><title>A recent security incident involving Dropbox Sign</title><url>https://sign.dropbox.com/blog/a-recent-security-incident-involving-dropbox-sign</url></story><parent_chain></parent_chain><comment><author>chenxi9649</author><text>&amp;quot;Upon further investigation, we discovered that a threat actor had accessed data including Dropbox Sign customer information such as emails, usernames, phone numbers and hashed passwords, in addition to general account settings and certain authentication information such as API keys, OAuth tokens, and multi-factor authentication.&amp;quot;&lt;p&gt;hashed passwords, API keys, OAuth tokens, MFA...&lt;p&gt;Oh no.</text></comment>