The original post: /r/privacy by /u/LocationEfficient161 on 2024-05-03 01:42:04.

DropBox states an unknown Threat Actor(s) was able to access user e-mails, usernames, account settings, and in some scenarios hashed passwords, phone numbers, API keys, OAuth tokens, and MFA.

Actual SEC filing https://www.sec.gov/Archives/edgar/data/1467623/000146762324000024/dbx-20240429.htm and DropBox announcement https://sign.dropbox.com/blog/a-recent-security-incident-involving-dropbox-sign