account takeover

Dropbox Lenovo ID Breach — No Password Needed to Break In

By Editorial Team | September 8, 2026

A Dropbox Lenovo ID breach let attackers register fake Lenovo IDs with victims' emails, then log into Dropbox accounts without a password.

A Dropbox Lenovo ID breach compromised roughly 5,000 accounts without attackers ever needing a Dropbox password. Dropbox confirmed on September 1, 2026 that a flaw in Lenovo’s email verification process let an unauthorized party register a Lenovo ID using a victim’s email address, then use that fraudulent identity to sign straight into the matching Dropbox…