Dropbox breach seemingly caused by egregious authentication failure [U] - 9to5Mac

Dropbox Security Breach: Hackers Access Accounts Through Authentication Flaw - Decrypt

Attackers reportedly registered Lenovo IDs using victims’ email addresses, allowing them to sign into existing Dropbox accounts without their passwords.