A massive list of Dropbox usernames and password has been leaked online. Before I get into the details, seriously you should change your passwords if you’re  a Dropbox user. Now coming back to the news, everything started when a Pastebin entry appeared online with 400 Dropbox usernames and passwords. The poster allegedly mentioned that this is only a snippet of the entire list and contains the usernames alphabetized in the B’s.

The alleged hacker is asking readers for Bitcoin donations and upon receiving which s/he would post the reminder of the list. Their claim suggests that, they have access into 6.9 million user account details. Even if you think your details won’t be there, it would be a better idea to turn on the two factor authentication for your account.

Dropbox has issued a statement regarding this to TNW, and here it goes:

Dropbox has not been hacked. These usernames and passwords were unfortunately stolen from other services and used in attempts to log in to Dropbox accounts. We’d previously detected these attacks and the vast majority of the passwords posted have been expired for some time now. All other remaining passwords have been expired as well.