Need to see if your shared folder is taking up space on your dropbox 👨💻? Find out how to check here.
security
14 Topics
I can't access my Dropbox Fax account due to MFA, even though I never set it up.
Any help would be greatly appreciated! This situation is so confusing I don't know where to even start! I'll refer to hellofax with that name (including for dropbox fax) since it's easier than navigating the "rebranding" language. I've had a (free/basic) dropbox account since onedrive was called mesh (my first referral was in 2010)... I've never had a hellofax account, afaik (as per my password manager, which is a complete record) Recently I was looking for fax solutions and stumbled upon hellofax.com. It took a while to realize the dropbox connection, and I can't vouch for every step I took, but the basic outline is.... 1 - attempted a hellofax login directly? (it may have shown a dropbox fax branding, but I don't remember). This failed in a way I don't remember... probably invalid username/pwd, then the standard "forgot password" technique to force a reset email to be sent. I used a reset email from noreply@mail.hellofax.com. but this simply led to a mfa challenge! 2 - I don't use dropbox that often but did have mfa enabled and had to recover it, then disable it... once I realized my dropbox account mfa was old, I recovered it using phone number backup and then TURNED OFF dropbox mfa to simplify and trouble shoot. My dropbox login and account are working flawlessly, except... 3 - Regardless of how I attempt to login to hellofax, I'm seeing a MFA challenge even though I have dropbox mfa disabled and didn't have a hellofax account previously and so, no MFA configuration... 4 - No MFA recovery options are available for the hellofax login other than recovery codes (which I don't have, since I didn't set it up in the first place). This is another tell-tale clue, since I NEVER set up MFA with TOTP without also setting up email, SMS, or phone alternates. If a service doesn't offer these, I don't enable MFA! 4- Dropbox support is saying they can't (or won't) help me recover my hellofax account unless I provide them my "payment information" from my dropbox account and some other options involving "dropbox sign" (some sso/enterprise solution? I really don't care about that). Does anyone have any suggestions about how to straighten this out? who to contact? what magic words / actions are needed?144Views0likes3Comments
Received a suspicious email from Dropbox Sign but I've never used Dropbox Sign or Dropbox
Hello, I made an account just because of this email I received. Says my account would be charged but I've never used hellosign or Dropbox before. Now sure how I can get an email for an account I did not have. Please let me know how to identify if this is fake. Thank you300Views0likes3CommentsPossible scam email sent directly from noreply@mail.hellosign.com
Hello! This morning I received a strange email from noreply@mail.hellosign.com and it was for a signature for a subscription for Geek $quad(?). It's $399 USD and I have no idea what this service would be for. I Googled the "customer support team" phone number and it came back as potentially being for an escort service in Florida. I checked my bank accounts, Paypal and Venmo, and don't see any pending charges. The signature request is also from an email and name I do not recognize and it appears they're a student at an Italian university(their email may have been hacked I'm guessing). So yeah, definitely not convinced this is a legit charge, but I can't lose $399 dollars either, so I guess I'm trying to see if this legit, or just spam. The fact that it was sent from a legitimate Dropbox email gives me pause. No, I did not click the links, but when I hover my cursor over the links in Chrome, I can see the URLs are for official Dropbox services. I called Geek Squad, just to confirm that there is no account in my name. I'm not sure if there's a specific way to contact Dropbox directly about this, or if this is the appropriate method. Thanks to anyone for offering help! [Removed as per Community Guidelines]Solved10KViews2likes13Comments
Information regarding your Dropbox Sign (formerly HelloSign).
I got this email today. Is this legitimate? From No-reply@em-s.dropbox.com May 5,2024 Information regarding your Dropbox Sign (formerly HelloSign) Hello, We’re reaching out because on April 24th, we became aware of unauthorized access to the Dropbox Sign (formerly HelloSign) production environment. Upon further investigation, we discovered that a threat actor had accessed Dropbox Sign customer information. You are receiving this message because your information was in the data the third party accessed. What happened We can confirm that Dropbox Sign customer information such as emails, usernames, phone numbers, hashed passwords, multi-factor authentication, and general account settings were obtained. Based on our investigation, there is no evidence of unauthorized access to the contents of customers’ accounts (i.e. their documents or agreements), or their payment information. What we’re doing When we became aware of this issue, we launched an investigation with industry-leading forensic investigators to understand what happened and mitigate risks to our users. In response, our security team reset users’ passwords, logged users out of any devices they had connected to Dropbox Sign. What you can do Passwords and multi-factor authentication: We’ve expired your password and logged you out of any devices you had connected to Dropbox Sign to further protect your account. The next time you log in to your Sign account, you’ll be sent an email to reset your password. Customers who use an authenticator app for multi-factor authentication should reset it as soon as possible. Please delete your existing entry and then reset it. If you use SMS you do not need to take any action. If you reused your Dropbox Sign password on any other services, we strongly recommend that you change your password on those accounts and utilize multi-factor authentication when available. Instructions on how to do this for your Dropbox Sign account can be found here. At Dropbox, our number one value is to be worthy of trust. We hold ourselves to a high standard when protecting our customers and their content. We didn’t live up to that standard here, and we’re deeply sorry for the impact it caused our customers. We are grateful for your partnership, and we’re here to help all of those who were impacted by this incident. For more information on this incident, how to contact us, and updates see here. - The Dropbox team1.8KViews0likes5Comments
My templates and history of signed documents have disappeared after resetting Sign password
After resetting the password as recommended after the Dropbox Sign security incident. All the account data has disappeared, including the contracted plan and my payment method. It looks like a newly created account.1.1KViews0likes7Comments
Downgraded to Basic Account from Business Team
I have a Dropbox Business account for work and created a password. My boss added me to the Dropbox Sign Team. Today, I made the mistake of signing in using Google with the same email address and now it looks like a basic account with no Team access. Even after logging out and back in, I cannot see my Team. Boss is away this week, any way I can regain my previous access? Our business account is upgraded as of last week.Solved3.1KViews0likes2Comments
