Dropbox Watchdog

Search issues

Search the Dropbox Watchdog archive

All issues

Drew Houston steps back: handing off as 'AI rewrites the era' he built in

May 2026

LowStatus: OngoingYear: 2026

In an 8-K filed May 26, 2026, Dropbox disclosed that co-founder Drew Houston would step back as CEO after 19 years, with the Board appointing Ashraf Alkarmi — its General Manager, Core — as Co-Chief Executive Officer effective that date, ahead of Alkarmi becoming sole CEO and Houston moving to executive chairman 'following a transition period.' The handoff arrives as AI upends the software era Dropbox grew up in and the company's revenue sits near flat.

What happened

Dropbox disclosed the transition in an 8-K filed May 26, 2026 (Item 5.02, reporting a May 21, 2026 Board action): the Board had appointed Ashraf Alkarmi — who joined in November 2024 to run the core business after senior product roles at Vimeo, Amazon, and Meta — as Co-Chief Executive Officer and a member of the Board, effective May 26, 2026, serving alongside co-founder, CEO, and Chairman Andrew (Drew) Houston. Per the filing, Houston 'will remain as Co-Chief Executive Officer for a period of time following Mr. Alkarmi's appointment to ensure a smooth transition, following which Mr. Houston is expected to move into the role of Executive Chairman, with Mr. Alkarmi remaining as our sole Chief Executive Officer.' The company's own blog post announcing the move, filed as Exhibit 99.1 to the same 8-K, put the plan in plainer language: 'Following a transition period, Ashraf will become sole CEO and Drew will move into the role of executive chairman.' Reporting framed the transition explicitly against the AI moment: Houston was handing off 'as AI is rewriting the era of tech he came up in,' the same wave of large language models from OpenAI, Anthropic and others that investors fear could hollow out incumbent SaaS workflows.

The same 8-K disclosed Alkarmi's compensation terms as Co-CEO under Item 5.02: effective June 1, 2026, an annual base salary of $825,000, continued eligibility for the company's cash bonus plan 'at an annual performance-based target of 100% of his base salary,' and a grant of restricted stock units 'covering shares of the Company's Class A common stock with a value of $12,656,250,' vesting over four years. The same filing disclosed that Michael Torres, 49, was appointed Chief Product Officer by the Board, effective July 7, 2026 — the appointment the Exhibit 99.1 blog post previewed: 'I'm really excited to share that Mike Torres will be joining Dropbox and our senior leadership team as our new Chief Product Officer on July 7.'

Throughout 2025 Houston had been candid that AI was central to Dropbox's future, describing AI as the thing that could 'bring calm to the chaos' of modern work and saying he had taught himself machine learning and built internal AI tools himself. He insisted the step-back was not driven by structural problems in the business, noting that 'five years ago I would have been talking about needing to grow paying users and increase our cash flow.' Critics read the transition differently — as a founder stepping away from a mature, no-growth core just as the technology that threatens it accelerates, leaving an incoming CEO to prove that an AI product like Dash can become a real second act rather than a hedge against decline.

Dropbox's Form 10-Q for the quarter ended June 30, 2026, signed August 7, 2026, shows the transition to sole CEO had not yet completed: Alkarmi's certification in that filing (Exhibit 31.2) is titled 'CERTIFICATION OF CO-PRINCIPAL EXECUTIVE OFFICER' and is signed with the title 'Co-Chief Executive Officer (Co-Principal Executive Officer),' dated August 7, 2026 — more than two months after the 8-K, Alkarmi was still Co-CEO rather than sole CEO.

Impact

A founder-CEO transition after 19 years is a pivotal moment for any company, and the timing — near-flat revenue, a shrinking paying-user base, and an industry being reshaped by AI — frames it as a bet on new leadership to either revive growth through Dash or manage a graceful decline of the core. For customers, leadership change at the top adds uncertainty about product priorities and continuity; for investors, it intersects with activist pressure over the founder's control. As of the company's Q2 2026 10-Q (signed August 7, 2026), Alkarmi was still certifying as Co-CEO rather than sole CEO, indicating the transition period Dropbox described was still underway more than two months after the announcement. Whether the handoff and the AI-first strategy pay off is unresolved and will play out over the coming years.

Dropbox's Response / Official Position

Dropbox disclosed the transition as a planned succession in an 8-K (Item 5.02) filed May 26, 2026: Alkarmi appointed Co-Chief Executive Officer effective that date, with compensation terms of an $825,000 annual base salary effective June 1, 2026, a cash bonus target of 100% of base salary, and restricted stock units 'with a value of $12,656,250'; the same filing disclosed Michael Torres's appointment as Chief Product Officer effective July 7, 2026. Houston publicly characterized the move as not driven by business deterioration and reaffirmed AI and Dash as central to Dropbox's next chapter.

Sources

Related guides

Spot an error, or have a source to add?
Report an error / suggest update

Related issues

9 sources
HighApproximately 5,000 accounts; files accessed in fewer than a third (about 1,500 by 9to5Mac's arithmetic)

The 2026 Lenovo ID sign-in flaw: ~5,000 Dropbox accounts entered without a Dropbox password

A flaw in how Lenovo verified account-holder email addresses let an attacker register a Lenovo ID on a victim's email, and Dropbox's Lenovo ID sign-in link then trusted that identity without ever asking for a Dropbox password — reaching roughly 5,000 accounts.

Security Incidents & Data BreachesCurrent / Ongoing Issues (2024–2026)
Read documentation

Dropbox's Q1 and Q2 2026 results both kept total reported revenue growth under 1% year-over-year, the company refinanced debt and repurchased hundreds of millions of dollars in stock over the same six months, and the period closed with a co-CEO handoff, a new product chief, and a routine, tax-related insider stock disposition reported by the Motley Fool.

Pricing & Business PracticesCurrent / Ongoing Issues (2024–2026)
Read documentation

ConsentFix, an OAuth-consent phishing technique first documented by Push Security in December 2025 and reported on independently through mid-2026, delivers its Microsoft 365 lures through trusted file-hosting platforms — reporting names both Dropbox and DocSend (a Dropbox company) as hosts for the password-protected files attackers use to get past mail filters.

Security Incidents & Data BreachesCurrent / Ongoing Issues (2024–2026)
Read documentation

Dropbox's own status page logged eleven separate incidents between January and September 2026 — mostly brief, but including a roughly 93-hour shared-content-download degradation in June and an 11-hour, 46-minute Dropbox Protect failure in August.

Reliability & Data LossCurrent / Ongoing Issues (2024–2026)
Read documentation