Hackers have stolen over 60 million account credentials fro the online cloud storage Dropbox. Although the breach and the discovery were made in 2012 and Dropbox said that it has already forced a password reset, it wasn't known how many users had been affected.
In four files with the size of about 5GB, the data include email addresses and hashed password for Dropbox. The details contain 68,680,741 accounts in total. According to an senior Dropbox employee, the data is legitimate.
"Our security teams are always watching out for new threats to our users. As part of these ongoing efforts, we learned about an old set of Dropbox user credentials (email addresses plus hashed and salted passwords) that we believe were obtained in 2012. Our analysis suggests that the credentials relate to an incident we disclosed around that time," wrote the company.
Since the 2012 breach, Dropbox has changed its password hashing method several times in order to prevent future breaches.
Previously, hundreds of millions of records from sites such as ">LinkedIn and VK, as well as MySpace and Tumblr from years-old data breaches were sold and traded in the deep web.
