Dropbox confirmed that it had experienced a data breach incident in November 2022.
After an unknown attacker gained access to credentials, data, and other secrets within their private GitHub code repositories.
Dropbox did admit that the code contained a "few thousand names and email addresses belonging to Dropbox staff," as well as some plain text secrets like API keys and other credentials.
They adopt common security precautions like frequent password changes and turning on MFA for your storage account.
Source: https://purplesec.us/security-insights/dropbox-data-breach/
"id": "DRO121761222",
"linkid": "Dropbox",
"type": "Breach",
"date": "11/2022",
"severity": "80",
"impact": "5",
"explanation": "Attack threatening the organization's existence"