Dropbox experienced a security breach. The threat actors stole 130 code repositories after gaining access to one of its GitHub accounts using employee credentials stolen in a phishing attack. The attackers breached the account on October 14. The code accessed by this threat actor contained some credentials primarily, API keys used by Dropbox developers. The code and the data around it also included a few thousand names and email addresses belonging to Dropbox employees, current and past customers, sales leads, and vendors. On the same phishing page, the employees were asked to enter their GitHub username and password & to use their hardware authentication key to pass a One Time Password (OTP). They did not include code for their core apps or infrastructure. The attackers never had access to customers' accounts, passwords, or payment information, and its core apps and infrastructure were not affected as a result of this breach.

The Evony gaming company's website and forum were breached, exposing the personal information of 33 million players. A second hack of the website occurred two months later, this time targeting the Evony forum and exposing the personal information of 938,000 registered users. Among other internal data fields, each record has an IP address, password, email address, and username. Whenever a user appears in a breach, they can now receive notifications. Because the passwords were saved in unsalted MD5 and SHA-1 (Secure Hash Algorithm 1), hackers can easily decrypt them.

The corporation is being forced by a DropBox data breach to reset login credentials for users who were part of an online data dump. Dropbox has acknowledged the 2012 data breach and informed users that they could be required to reset their passwords as a result of the incident. Motherboard, which was able to get portions of the compromised collection, claims that the contents include hashed passwords and email addresses belonging to Dropbox customers. Undoubtedly, the data is authentic, as stated by an anonymous Dropbox staff member who spoke on condition of anonymity.