Update: Here’s the company’s blog post, which just went live: The team is now investigating if any accounts were improperly accessed, and says that anyone who was impacted will be notified. The company will be announcing that “much less than 1 percent” of users logged in during this time, and that all sessions have now been logged out as a security precaution. The question now is how many people were affected. So, in total, the bug was live for around four hours. We’ve now confirmed with Dropbox that the service did have this issue yesterday - Dropbox says that it began after a code push at 1:54 PM PDT and was fixed at 5:46 PM PDT (they had the fix live five minutes after they discovered it). In other words, you could log into someone’s account simply by typing in their email address. Given that many people entrust Dropbox with important data (one of the service’s selling points is its security), that’s a really big deal.

If your ESP is able to help you regain access, you can then request a password reset link for your Dropbox account.This morning a post on Pastebin outlined a serious security issue that was spotted at Dropbox: for a brief period of time, the service allowed users to log into accounts using any password. Dropbox is not an ESP, and can’t contact ESPs on your behalf. Only your ESP can help you regain access to your email account.

If you can’t sign in to your email account, try contacting your email service provider (ESP) for assistance. If your password has expired, you may be able to reset the expired password, and update your email address, on another device you’re signed into. Sign in to Dropbox when your password has expired If you lost access to the email address associated with your Dropbox account but still remember your password, try to sign in to your Dropbox account and then immediately change your email address. Sign in to Dropbox when you know your password

If you’re not sure what email address you used used to create your Dropbox account, you can look it up on a connected device, shared folder, or your billing information. Find out what email address is associated with your Dropbox account

Dropbox account log in