We are aware of the issue with the badge emails resending to everyone, we apologise for the inconvenience - learn more here.
Forum Discussion
Information regarding your Dropbox Sign (formerly HelloSign).
I got this email today. Is this legitimate? From No-reply@em-s.dropbox.com May 5,2024 Information regarding your Dropbox Sign (formerly HelloSign) Hello, We’re reaching out because on Ap...
Hello, if anyone can please confirm an email received is legitimate? The email was received from "no-reply@em-s.dropbox.com" with the subject "Information regarding your Dropbox Sign (formerly HelloSign) account". I can't find any other reference to a supposedly security breach. TIA
- Megan
Dropbox Staff
Hey everyone, thanks for posting here.
On April 24, we became aware of unauthorized activity to the Dropbox Sign production environment and found that a threat actor had accessed Dropbox Sign customer information.
In response, our security team reset users’ passwords, logged users out of devices connected to Dropbox Sign, and is coordinating the rotation of all API keys and OAuth tokens. We’re in the process of reaching out to all users impacted by this incident who need to take action with instructions on how to further protect their data.
More information can be found in our blog post here: https://sign.dropbox.com/blog/a-recent-security-incident-involving-dropbox-sign
Thanks a bunch!
