Update: The alleged hack against Dropbox is looking more like is an elaborate hoax, timed perfectly with the website’s incidental outage. As security researcher Wesley Mcgrew points out, the emails supposedly stolen from Dropbox have been found elsewhere on the web and a known Anonymous Twitter account is officially denying their involvement. Moreover, it seems the group claiming credit may incur the wrath of Anonymous, because they said the attack was in the name of fallen internet activist, Aaron Swartz.
Dropbox sent us this updated response, confirming the hoax:
“Dropbox site is back up.
In regards to claims of “leaked user information” – this is a hoax. This is not Dropbox data. The list was published 12/9/13 at: http://pastebin.com/64PAAV1c
Today’s outage was caused during internal maintenance, and was not caused by external factors. We apologize for any inconvenience.”
Our original story below:
Popular backup service Dropbox is offline and the hacktivist contingent, Anonymous, is claiming credit. “BREAKING NEWS: We have just compromised the @Dropbox Website http://bit.ly/1cMlbvt #hacked #compromised,” tweeted an alleged Anonymous Twitter account.
Join 10k+ tech and VC leaders for growth and connections at Disrupt 2025
Netflix, Box, a16z, ElevenLabs, Wayve, Hugging Face, Elad Gil, Vinod Khosla — just some of the 250+ heavy hitters leading 200+ sessions designed to deliver the insights that fuel startup growth and sharpen your edge. Don’t miss the 20th anniversary of TechCrunch, and a chance to learn from the top voices in tech. Grab your ticket before doors open to save up to $444.
Join 10k+ tech and VC leaders for growth and connections at Disrupt 2025
Netflix, Box, a16z, ElevenLabs, Wayve, Hugging Face, Elad Gil, Vinod Khosla — just some of the 250+ heavy hitters leading 200+ sessions designed to deliver the insights that fuel startup growth and sharpen your edge. Don’t miss a chance to learn from the top voices in tech. Grab your ticket before doors open to save up to $444.
[tweet https://twitter.com/AnonOpsKorea/status/421823871960899585]
Dropbox seems to be denying their website was hacked: “We are aware of an issue currently affecting the Dropbox site. We have identified the cause, which was the result of an issue that arose during routine internal maintenance, and are working to fix this as soon as possible. We apologize for any inconvenience,” went a company blog post. [Update: Dropbox and has called us and is explicitly denying they have been hacked]
If they were, indeed, hacked it’s not clear who is ultimately responsible. Another hacktivist group, 1775sec, is also claiming credit:
[tweet https://twitter.com/1775Sec/statuses/421820685766250496]
We have reached out to Dropbox for more details and will update you on this story as details unfold.
Meanwhile, 1775sec and Anonymous have been mocking Dropbox’s denial and claiming the hack was done in the honor of fallen Internet activist, Aaron Swartz.
[tweet https://twitter.com/1775Sec/status/421831664239509504]
1775sec also claims that they successfully stole a list of email addresses from Dropbox, which they posted on the website, pastebin.com.
Story is unfolding…