Dropbox says no evidence of hack in investigation of spam

[security curmudgeon <jericho () attrition org>]

---------- Forwarded message ----------
From: InfoSec News <alerts () infosecnews org>

https://www.computerworld.com/s/article/9229420/Dropbox_says_no_evidence_of_hack_in_investigation_of_spam

By Cameron Scott
IDG News Service
July 20, 2012

Dropbox's ongoing investigation into a possible security breach has not 
produced any evidence that its systems have been infiltrated, according to 
an update Friday to the company's user forum.

"As of today, we've found no intrusions into our internal systems and no 
unauthorized activity in Dropbox accounts," said the update, posted early 
Friday morning.

The cloud storage company brought in a team of outside investigators to 
look into complaints that users were receiving spam at email addresses 
they used solely for Dropbox. Several users reported receiving the same 
spam messages, spurring fears that the spammers had obtained their email 
addresses through Dropbox.

Because users sometimes store personal and professional data with cloud 
storage services like Dropbox, security is a serious issue.

[...]
_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)
Archived at http://seclists.org/dataloss/
Unsubscribe at http://datalossdb.org/mailing_list

Supporters:

Risk Based Security (http://www.riskbasedsecurity.com/)
Risk Based Security equips organizations with security intelligence, risk
management services and on-demand security solutions to establish
customized risk-based programs to address information security and
compliance challenges. 

Tenable Network Security (http://www.tenable.com/)
Tenable Network Security provides a suite of solutions which unify real-time
vulnerability, event and compliance monitoring into a single, role-based, interface
for administrators, auditors and risk managers to evaluate, communicate and
report needed information for effective decision making and systems management.