Sep 2: Hackers got into 5,000 Dropbox accounts with just an email address, through a Lenovo login most people never used

Dropbox has warned around 5,000 users that attackers broke into their accounts through an old shortcut that let people sign in with a Lenovo ID instead of a Dropbox password. Lenovo didn't properly check email addresses, so attackers created Lenovo logins using Dropbox users' emails and got straight in. The compromise lasted from August 4 to 21, and attackers opened files belonging to fewer than a third of the affected users. Dropbox confirmed the scale of the attack to Reuters.