Terms of Use For FixedByVonnie

By proceeding to access fixedByVonnie.com, you expressly acknowledge, and agree to, all of the following:

fixedByVonnie.com is a personal website and blog owned by Security Plus Pro LLC, which is being presented for informational purposes only. The views on this website are solely those of the website owner (and not those of any employer or of any professional associations affiliated with the website owner).  Any views expressed in this website and any information presented on this website, or in any of its blog entries, should not be relied on for any purpose whatsoever other than as the personal opinions of the website owner.  The website owner expressly disclaims any and all liability for any information presented on this site.  The owner of this website and its blog posts shall not be held liable, and shall be held harmless, for any errors or omissions in any information or representations contained in this website, or in any of its blog entries.  The website owner also expressly disclaims any liability for the current or future availability of any such information. The website owner makes no representations as to the accuracy or completeness of any information on this website or which may be found by following any link on this website. The website owner shall not be held liable for any losses, injuries, damages, claims, or causes of action, from the display or use of any information on this website or in any of its blog entries. If you use the information on this website, or on any of its blog entries, you do so solely at your own risk.

Were almost 7 million Dropbox accounts hacked on October 13th 2014? - fixedByVonnie

Were almost 7 million Dropbox accounts hacked on October 13th 2014?

I don’t know if you realize this but yesterday afternoon, an anonymous user claimed that approximately 7 million Dropbox accounts were hacked.  The user posted about 400 allegedly hacked Dropbox usernames and passwords to pastebin.com as a teaser and promised future leaks would be commensurate with Bitcoin donations.  In other words, the more Bitcoins people donate the more Dropbox accounts would be leaked to the public.

Wow.

Here’s the deal…

The password leaks poured in via Reddit yesterday at around 4pm CDT and Reddit users have been swarming like maggots over the passwords, testing for active accounts.

Has Dropbox been hacked? On Reddit

Some Reddit users actually claim a few are valid; however, Dropbox adamantly denies that it was hacked.

The Dropbox Blog.  Dropbox wasn't hacked

Yesterday on the Dropbox blog, Anton Mityagin assured users that contrary to what the media is saying, Dropbox wasn’t hacked.

Mityagin said:

The usernames and passwords referenced in these articles were stolen from unrelated services, not Dropbox. Attackers then used these stolen credentials to try to log in to sites across the internet, including Dropbox.

I don’t know if Dropbox was hacked or not and I’m not sure what Mityagin means by “unrelated services” but one thing is for sure: if you have a Dropbox account you need to do two things immediately:

Two step verification means that in order to login to your account you’ll need to enter two things: one is your password and the other is a six digit security code that gets sent to your mobile device.  So even if someone steals your password they can’t access your account without the mobile device.

It’ll take about 15 minutes to reset your password and enable two-step verification but it could save you hours of headaches later.  I’ve created a little guide on how to make passwords that are both strong and memorable, so I recommend you check that out too!

So what do you think about the alleged Dropbox hack?  Did you see the password list?  Most are very simple; when will people learn to use complex passwords?

Sound off in the comments!

About

Connect with Vonnie on Twitter

Posted in Hardware, Smartphones, Windows, Windows 7, Windows 8, Windows 8.1, Windows Vista Tagged with: , , ,