We are aware of the issue with the badge emails resending to everyone, we apologise for the inconvenience - learn more here.

Forum Discussion

AWei's avatar
AWei
New member | Level 2
2 years ago

Suspected hacked personal account

I suspect my account hacked today so I'd like to ask for some guidance.

 

1. I found some files missing. I am pretty sure I created a folder and copied some files into this folder and I have used them a few times over the past two weeks, but today I found both the folder and files are missing from my Dropbox. Surprisingly I can not see any record, under event, or deleted items for these files. So I am wondering if it is possible for the hackers to delete them completely and they can never been restored? I thought it will be kept by Dropbox for 30 days as a minimum.

 

2. I can see a unknown computer has visited my account so I am wondering if Dropbox can provide additional details.

 

Thanks,

  • Hi 

     

    Yes the 30 days record doesnt apply if something is permanently deleted - by that all record of said file (events etc.) is also removed. 

     

    The ONLY info available is https://www.dropbox.com/account/security. Nothing else is stored / kept. 

  • Australia 's avatar
    Australia
    New member | Level 2

    My account was also hacked four days ago, and the hacker permanently deleted all my files.

    Every file and folder, without exception, is gone—permanently erased.

    We exhausted every avenue—Rewind, Cached, even deleting folders—but nothing yielded results.

    This situation is utterly disgraceful. Dropbox offers no backup option from its server, leaving users vulnerable to irretrievable loss.

    Shame on Dropbox—this lack of foresight and security measures is unacceptable.

    • Australia 's avatar
      Australia
      New member | Level 2

      My account was also hacked four days ago, and the hacker permanently deleted all my files.

      Every file and folder, without exception, is gone—permanently erased.

      We exhausted every avenue—Rewind, Cached, even deleting folders—but nothing yielded results.

      This situation is utterly disgraceful. Dropbox offers no backup option from its server, leaving users vulnerable to irretrievable loss.

      Shame on Dropbox—this lack of foresight and security measures is unacceptable.

       
       
    • Australia 's avatar
      Australia
      New member | Level 2

      My account was hacked four days ago, and the hacker permanently deleted all my files.

       

      Every file and folder, without exception, is gone—permanently erased.

       

      We exhausted every avenue—Rewind, Cached, even deleting folders—but nothing yielded results.

       

      This situation is utterly disgraceful. Dropbox offers no backup option from its server, leaving users vulnerable to irretrievable loss.

       

      Shame on Dropbox—this lack of foresight and security measures is unacceptable."

  • Mark's avatar
    Mark
    Icon for Super User II rankSuper User II

    Hi AWei 

     

    1) if the files are permanently removed they disappear from both Events and Deleted items. Files are recoverable for 30 days but only if not permanently deleted. If they are there is no recovery.

    2) the only info about the device is what you see on that page I'm afraid. Dropbox has/stores no other info.

     

    I assume you've not secured your account/reset password/set up 2FA etc. ?

    • AWei's avatar
      AWei
      New member | Level 2

      Thanks for your response Mark.

       

      For the first question, my understanding is if file are permanently deleted, even within 30 days, then all the event history and deletion history related to these files will also be removed. Is it corret?

       

      For the second question, I can see the suspicious computer name was added into the device list, so I assume IP address and accurate time is not recorded by Dropbox?

      • Rich's avatar
        Rich
        Icon for Super User II rankSuper User II

        AWei wrote:

        I can see the suspicious computer name was added into the device list, so I assume IP address and accurate time is not recorded by Dropbox?


        If you hover over the i symbol in the Most recent activity column, you'll see the IP address.