The Evony gaming company's website and forum were breached, exposing the personal information of 33 million players.
A second hack of the website occurred two months later, this time targeting the Evony forum and exposing the personal information of 938,000 registered users.
Among other internal data fields, each record has an IP address, password, email address, and username. Whenever a user appears in a breach, they can now receive notifications.
Because the passwords were saved in unsalted MD5 and SHA-1 (Secure Hash Algorithm 1), hackers can easily decrypt them.
Source: https://securityaffairs.com/51908/data-breach/dropbox-data-breach-2.html
"id": "DRO202051123",
"linkid": "dropbox",
"type": "Breach",
"date": "10/2016",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"