It's not clear whether they provided the data they obtained from Leakbase to Dropbox directly or not, although it would be reasonable to assume that Dropbox has a copy in their hands from somewhere. It's just as well because it would be a far more trivial exercise to crack the older algorithm but without the salts, it's near impossible.Īt first glance the data looks legit and indeed the Motherboard article above quotes a Dropbox employee as confirming it. Only half the accounts get the 'good' algorithm but here's the rub: the bcrypt accounts include the salt whilst the SHA1 accounts don't. It's a relatively even distribution of the two which appears to represent a transition from the weaker SHA variant to bcrypt's adaptive workload approach at some point in time. What we've got here is two files with email address and bcrypt hashes then another two with email addresses and SHA1 hashes. Very shortly after, a supporter of Have I been pwned (HIBP) sent over the data which once unzipped, looked like this: Not just a little bit hacked and not in that 'someone has cobbled together a list of credentials that work on Dropbox' hacked either, but proper hacked to the tune of 68 million records.

it's our duty,' said Ojas Jog, another parent.Earlier today, Motherboard reported on what had been rumoured for some time, namely that Dropbox had been hacked. The photos and videos were apparently first shared with only one person, sometimes through social media apps like Snapchat, before being saved and uploaded to the Dropbox, according to students. 'Please know that NPSD and local law enforcement officials are working together on this matter and take alleged activities such as these very seriously,' the message read, in part. North Penn School District administrators sent an email to parents on Thursday notifying them of the allegations and the resulting investigation. It's respect,' said parent Debbie Aleide. The explicit images that include nude and seminude teen girls under 18 were uploaded alongside, in some cases, girls' names. Students of North Penn High School in Towamencin Township tell NBC10 at least one teenage boy created a Dropbox account to share the media with others. Photos and videos of naked high school girls allegedly posted on a file-sharing website and shared among teens at a Montgomery County, Pennsylvania high school are at the center of an police and school investigation.

Dropbox links free nudes