We are aware of the issue with the badge emails resending to everyone, we apologise for the inconvenience - learn more here.
Forum Discussion
Dropbox account hacked
My Dropbox account was hacked. I did not have 2FA set up. Hacker changed password and set up 2FA to their device. If I did a password reset, it would send me an email, but when I changed it would ...
Mark
Super User II
Super User IIAs awful as the issue is calling other people cannot help. Dropbox has NO incoming phone support at all. So any numbers you do call are not Dropbox. Phoning other departments means they have to do the same - log a ticket.
Unfortunately, as with any service, the support you get is based upon the plan you are on (i.e. paid support (rightly) gets priority. Its also worth remembering that like ALL services the user needs to take some responsibility in securing systems and services - emails, 2FA etc.
This is not an issue limited to Dropbox - Google, Apple, Microsoft, Yahoo etc. it is all the same.
This is not the same as other apps, the others do not send emails from their system reminding recipients to click on link that is a virus. These are reminders Dropbox generated, not ones I generated or requested. They also sent them out knowing that link was a virus. I logged many claims, nothing was done for 123 hours. I did not call anyone since they have no phone support for any department. Other apps have fraud responds in less than 123 hours. I had no ability to delete my account or stop criminal from access to my account.
- Rich
rpmyer wrote:
They also sent them out knowing that link was a virus.
No, they didn't. An automated system continued to send emails, and it had no idea that it was a virus.
I logged many claims, nothing was done for 123 hours.HOW did you file those claims? Did you open a ticket with Support? If so, what are those ticket numbers? Also, keep in mind that opening multiple tickets just moves you to the back of the line with each new request. You only need one ticket.
... and [the] system is vulnerable ...This wasn't a case of the system being vulnerable. This was a case of someone gaining access to your account. That's not a vulnerable system. That's someone either guessing a weak password or gaining access to your credentials through another method, such as you using the same password for multiple services. That makes your account vulnerable, but not the entire system, and this is why features such as 2FA exist.
