Connection with Epson Printer just randomly stopped

It looks like there was a security issue with Dropbox sign.  It looks like it happened at the end of the month (april) coincidentally.  read below.  Not sure if this has anything to do with what we are experiencing.

On April 24th, we became aware of unauthorized access to the Dropbox Sign (formerly HelloSign) production environment. Upon further investigation, we discovered that a threat actor had accessed Dropbox Sign customer information. We believe that this incident was isolated to Dropbox Sign infrastructure, and did not impact any other Dropbox products. We’re in the process of reaching out to all users impacted by this incident who need to take action, with step-by-step instructions on how to further protect their data. Our security team also reset users’ passwords, logged users out of any devices they had connected to Dropbox Sign, and is coordinating the rotation of all API keys and OAuth tokens. Please read on for additional details and an FAQ.

On April 24th, we became aware of unauthorized access to the Dropbox Sign (formerly HelloSign) production environment. Upon further investigation, we discovered that a threat actor had accessed data including Dropbox Sign customer information such as email addresses, usernames, phone numbers and hashed passwords, in addition to general account settings and certain authentication information such as API keys, OAuth tokens, and multi-factor authentication.

For those who received or signed a document through Dropbox Sign, but never created an account, email addresses and names were also exposed. Additionally, if you created a Dropbox Sign or HelloSign account, but did not set up a password with us (e.g. “Sign up with Google”), no password was stored or exposed. We’ve found no evidence of unauthorized access to the contents of customers’ accounts (i.e. their documents or agreements), or their payment information.  

From a technical perspective, Dropbox Sign’s infrastructure is largely separate from other Dropbox services. That said, we thoroughly investigated this risk and believe that this incident was isolated to Dropbox Sign infrastructure, and did not impact any other Dropbox products.

What happened and our response

When we became aware of this issue, we launched an investigation with industry-leading forensic investigators to understand what happened and mitigate risks to our users.  

Based on our investigation, a third party gained access to a Dropbox Sign automated system configuration tool. The actor compromised a service account that was part of Sign’s back-end, which is a type of non-human account used to execute applications and run automated services. As such, this account had privileges to take a variety of actions within Sign’s production environment. The threat actor then used this access to the production environment to access our customer database.

In response, our security team reset users’ passwords, logged users out of any devices they had connected to Dropbox Sign, and is coordinating the rotation of all API keys and OAuth tokens. We reported this event to data protection regulators and law enforcement.

Hello  MMarchincin ,

Thank you for your input.  This is most probably linked to our issue.  I am not sure how you relate to the customer service from Dropbox as your messages indicates "WE".  Please keep us posted if you have information on when this will get solved.  We are in a mess for efficient work.  Thank you.

---

torero wrote:

I am not sure how you relate to the customer service from Dropbox as your messages indicates "WE".

---

They don't work for Dropbox. They are relaying the content of the notice that Dropbox posted about the incident.

• https://sign.dropbox.com/blog/a-recent-security-incident-involving-dropbox-sign

tried all of that and no luck

I am not associated with dropbox but a user who is frustrated and ran across that in my search.

Adding myself to the list.

I removed/re-added Dropbox (on both sides - EPSON and Dropbox).

I connected OneDrive to EPSON - which works.

And added Google Drive to EPSON - which works.

If this can't be sorted, I'm dropping my corporate and personal Dropbox accounts. This is bs.

If I may, what is BS is the way Dropbox is responding to the matter.  In my case they keep saying not their problem.  No question, no research.  Dumping the problem on users.

[deleted by user]

Same issues here, worked for years...