{
  "story_id": "f94389403fb2d8fecc7e021ba9ad79d2",
  "desk": "drm3",
  "revision": 1,
  "published_at": "2026-09-02T07:40:06.000Z",
  "content_hash": "54fb5b62a03b552b308bf1aa5f8f0c726d4ff00b1d567cdc5eb9fdbebe291eff",
  "hash_basis": "sha256 over `headline\\ndek\\nprose`, plus `\\n` + the canonical citations JSON when any source is placed, plus `\\n#blog` for blogs",
  "basis": {
    "headline": "Dropbox says 5,000 accounts compromised in August hack via Lenovo ID flaw",
    "dek": "Dropbox says 5,000 accounts compromised in August hack; files accessed in under a third.",
    "prose": "Dropbox said on September 1, 2020 that about 5,000 accounts were compromised in an August hack, with hackers viewing and downloading content stored on the platform. [^1]\n\nDropbox announced updates to its Dropbox Services Agreement, Terms of Service, and Privacy Policy on September 1, 2026. [^2]\n\nDropbox said that hackers accessed files in fewer than a third of the compromised accounts. [^3]\n\nDropbox sent emails to some users on August 31, 2020, notifying them that their accounts were accessed without authorization between August 4 and August 21. [^4]\n\nDropbox told Reuters that it identified unauthorized access affecting accounts linked to a Lenovo ID that did not have two-factor authentication enabled, and that it terminated all sessions authenticated through a Lenovo ID. [^5]\n\nThe Terms of Service were revised to allow users to access multiple individual and team workspaces with a single account. [^6]",
    "cited": "[{\"statement\":\"Dropbox said on September 1, 2020 that about 5,000 accounts were compromised in an August hack, with hackers viewing and downloading content stored on the platform.\",\"source\":\"RAPPLER\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T07:40:06.000Z\",\"publisher_count\":1,\"sources\":[\"RAPPLER\"]},{\"statement\":\"Dropbox announced updates to its Dropbox Services Agreement, Terms of Service, and Privacy Policy on September 1, 2026.\",\"source\":\"dropbox.com\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-01T17:00:00.000Z\",\"publisher_count\":1,\"sources\":[\"dropbox.com\"]},{\"statement\":\"Dropbox said that hackers accessed files in fewer than a third of the compromised accounts.\",\"source\":\"RAPPLER\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T07:40:06.000Z\",\"publisher_count\":1,\"sources\":[\"RAPPLER\"]},{\"statement\":\"Dropbox sent emails to some users on August 31, 2020, notifying them that their accounts were accessed without authorization between August 4 and August 21.\",\"source\":\"RAPPLER\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T07:40:06.000Z\",\"publisher_count\":1,\"sources\":[\"RAPPLER\"]},{\"statement\":\"Dropbox told Reuters that it identified unauthorized access affecting accounts linked to a Lenovo ID that did not have two-factor authentication enabled, and that it terminated all sessions authenticated through a Lenovo ID.\",\"source\":\"RAPPLER\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T07:40:06.000Z\",\"publisher_count\":1,\"sources\":[\"RAPPLER\"]},{\"statement\":\"The Terms of Service were revised to allow users to access multiple individual and team workspaces with a single account.\",\"source\":\"dropbox.com\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-01T17:00:00.000Z\",\"publisher_count\":1,\"sources\":[\"dropbox.com\"]}]",
    "kind": "news"
  },
  "receipt_verify": "Ed25519 over the dot-joined string `slice_hash.cursor_from.cursor_to.view.view_version.row_count`; public_key and sig are base64url of the raw 32-byte key / 64-byte signature",
  "receipt": null,
  "receipt_note": "this revision predates receipt-keeping (before v0.37.0); the filed row lives in the record",
  "generation_chain": {
    "wire": {
      "stream": "fountain_news",
      "story_id": "9b437a127d19b4aaa43c976d2afb1270",
      "thread_id": "a80761147b0ec7e307a6f9a1a5f24861",
      "thread_label": "Dropbox",
      "novelty": "UPDATE",
      "content_hash": "f69d37e59ad6f4f17f494279ec37d38a2425c159a4572e69b56616fccc218eb5",
      "last_published_at": "2026-09-02T07:40:06.000Z",
      "read_receipt": {
        "slice_hash": "069682019ef400563585527bab6474e0dc4419c25869011c2b01ad23bb466b71",
        "cursor_from": "eyJ0cyI6IjIwMjYtMDktMDJUMDY6NDY6NTIuMDAwMDAwWiIsImlkIjoiMWFmYjlhNThjYWIzZjJmNGNkN2I3YTRiZmQ3Y2YwOGYiLCJ2IjoiMSJ9",
        "cursor_to": "eyJ0cyI6IjIwMjYtMDktMDJUMDc6NDg6NDkuMDAwMDAwWiIsImlkIjoiZTlkZTA0NWE4NTRkNDJhYzAwMTVhN2EzZGE3MWMzOGQiLCJ2IjoiMSJ9",
        "view": "v_fountain_news",
        "view_version": "1",
        "row_count": 100,
        "window_days": 3,
        "bytes_scanned": 12017721,
        "credits": 8,
        "price_per_100_rows": 8,
        "sig": "4e4uuUUMSWBJT7xlEq27xWcgwtqZLJGYaNOsJ3sslOlxq3IrRr9i1CJiktWIbaGtetaDL4BBDFSkjx7Z91KnAg",
        "public_key": "bMUigy8O0jOnBxQ4Sc-5lwhIZ8LQVAhxMbR7qESVuUE",
        "signer_path": "lakehouse/data-extract/v1",
        "alg": "Ed25519",
        "signed": true
      }
    },
    "written_at": "2026-09-02T22:41:18.969Z"
  },
  "cited_facts": [
    {
      "statement": "Dropbox said on September 1, 2020 that about 5,000 accounts were compromised in an August hack, with hackers viewing and downloading content stored on the platform.",
      "source": "RAPPLER",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T07:40:06.000Z",
      "publisher_count": 1,
      "sources": [
        "RAPPLER"
      ]
    },
    {
      "statement": "Dropbox announced updates to its Dropbox Services Agreement, Terms of Service, and Privacy Policy on September 1, 2026.",
      "source": "dropbox.com",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-01T17:00:00.000Z",
      "publisher_count": 1,
      "sources": [
        "dropbox.com"
      ]
    },
    {
      "statement": "Dropbox said that hackers accessed files in fewer than a third of the compromised accounts.",
      "source": "RAPPLER",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T07:40:06.000Z",
      "publisher_count": 1,
      "sources": [
        "RAPPLER"
      ]
    },
    {
      "statement": "Dropbox sent emails to some users on August 31, 2020, notifying them that their accounts were accessed without authorization between August 4 and August 21.",
      "source": "RAPPLER",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T07:40:06.000Z",
      "publisher_count": 1,
      "sources": [
        "RAPPLER"
      ]
    },
    {
      "statement": "Dropbox told Reuters that it identified unauthorized access affecting accounts linked to a Lenovo ID that did not have two-factor authentication enabled, and that it terminated all sessions authenticated through a Lenovo ID.",
      "source": "RAPPLER",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T07:40:06.000Z",
      "publisher_count": 1,
      "sources": [
        "RAPPLER"
      ]
    },
    {
      "statement": "The Terms of Service were revised to allow users to access multiple individual and team workspaces with a single account.",
      "source": "dropbox.com",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-01T17:00:00.000Z",
      "publisher_count": 1,
      "sources": [
        "dropbox.com"
      ]
    }
  ],
  "note": "A signature proves who filed this and that it has not changed since. It never makes a claim true."
}