Attackers reportedly registered Lenovo IDs using victims’ email addresses, allowing them to sign into existing Dropbox accounts without their passwords.

来源：https://decrypt.co/377099/dropbox-security-breach