Dropbox accounts breached via Lenovo email verification flaw

Dropbox disclosed that unauthorized actors exploited a flaw in Lenovo's email verification process to register fraudulent Lenovo IDs and access some user accounts. The breach is confirmed by Dropbox, but the scope and affected user count remain unclear. This highlights supply-chain identity verification risks and may prompt credential-reset actions.