back

by yen223·14y ago·view on hn ↗
I would think that if the attacker had access to a Dropbox employee's account, which in turn gave him/her access to user accounts, that would constitute a security breach.
1 comments
if the attacker had access to a Dropbox employee's account, which in turn gave him/her access to user accounts ...

That didn't happen. The employee account merely contained a list of email addresses.

That’s not really a response, is it? User account data could be accessed – because Dropbox was unable to protect your data. That’s not quite as awful a access to user account but it’s still awful.