Dropbox keeps your files. This is the record of when it failed to.

After Dropbox disclosed the April 2024 Dropbox Sign breach, affected users filed proposed class actions in federal court alleging Dropbox negligently failed to protect their data and did not give prompt, adequate notice; the claims are allegations and the consolidated litigation followed in the Northern District of California.

An attacker compromised the production environment of Dropbox Sign (formerly HelloSign), exposing customer emails, usernames, phone numbers, hashed passwords, and authentication secrets including API keys, OAuth tokens, and MFA data.

Users discovered a 'third-party AI' setting that was switched on by default for most of the world, fueling fears that Dropbox was quietly feeding personal files to OpenAI. Dropbox said no data was passively sent and that files were not used to train models.

In April 2023 Dropbox cut about 500 jobs — 16% of its workforce — with CEO Drew Houston attributing the move partly to 'the AI era of computing,' a framing critics saw as repackaging cost-cutting as strategic transformation at a profitable company.

After years of advertising Dropbox Advanced as offering 'as much space as you need,' Dropbox replaced unlimited storage with metered tiers in August 2023, blaming a small group of heavy users including crypto miners and storage resellers.

A phishing campaign impersonating the CI provider CircleCI tricked Dropbox employees into handing over credentials and 2FA codes, letting attackers copy 130 of Dropbox's private source-code repositories.