Dropbox Watchdog

Search issues

Search the Dropbox Watchdog archive

All issues

Switched off by sanctions: no Dropbox in Crimea, North Korea, and Syria

2014–2026

LowStatus: Ongoing Users in sanctioned regions (Crimea, North Korea, Syria, others) affectedProduct: Core service (availability)Year: 2015

To comply with US trade sanctions and embargoes, Dropbox does not provide service in regions such as Crimea, North Korea, and Syria — meaning users there can be cut off from their existing files by their provider's home-country law.

What happened

Because Dropbox is a US company, it must comply with US trade-sanctions and embargo programs administered by the Office of Foreign Assets Control (OFAC). As a result, Dropbox states that it cannot offer some or all of its services in certain sanctioned countries and regions — its help documentation specifically names Crimea, North Korea, and Syria, and US sanctions have at various times also implicated other jurisdictions.

For an individual user in an affected region, the practical effect can be severe and sudden: access to an existing account and the files in it may be blocked, not because of anything the user did, but because of where they are and which government their provider answers to. Unlike the China block (imposed by a foreign government), this restriction is imposed by Dropbox itself to satisfy its own home country's law — a different but equally concrete demonstration that a US cloud provider's service is conditional on US foreign policy.

Sanctions compliance is legally mandatory and not unique to Dropbox. The entry documents it because it is another way users can lose access to their own data through no fault of their own, and because it highlights the sovereignty trade-off of storing files with a single-jurisdiction provider.

Impact

Sanctions-based restrictions show that even setting aside hacks, outages, and foreign censorship, a user's access to their Dropbox files is contingent on US foreign policy. For people in or traveling to affected regions — including aid workers, journalists, and ordinary residents — it can mean abrupt, unappealable loss of access, reinforcing the case for data portability and non-US or self-hosted alternatives where continuity matters.

Dropbox's Response / Official Position

Dropbox publishes a help-center article listing regions where service is restricted to comply with applicable trade sanctions and embargo requirements, and treats the limitation as a legal obligation rather than a discretionary choice.

Sources

Related guides

Spot an error, or have a source to add?
Report an error / suggest update

Related issues

Across multiple years, attackers have built convincing fake Dropbox login pages — reached via PDF lures and redirect chains through trusted cloud storage — to harvest victims' real business email and Dropbox credentials.

Security Incidents & Data BreachesAccount Lockouts & Support Failures
Read documentation
2 sources
Medium1,180+ documented BBB complainants (3-year window)

Over 1,180 BBB complaints: the paper trail of Dropbox's billing and support grievances

The Better Business Bureau has logged more than 1,180 complaints against Dropbox over three years, dominated by surprise auto-renewal charges, denied refunds, and support tickets that vanish without resolution.

Pricing & Business PracticesAccount Lockouts & Support Failures
Read documentation

Because Dash can be downloaded and set up with 'no sales or IT required,' an individual employee can connect and index an organization's apps and browser history without administrator oversight — recreating the shadow-IT data-governance risk that earlier consumer Dropbox use posed to enterprises.

Privacy & Encryption ConcernsCurrent / Ongoing Issues (2024–2026)Account Lockouts & Support Failures
Read documentation
3 sources
HighHundreds of thousands (Sign-breach class, now in arbitration)

2025: Dropbox forces the Sign-breach class action into private arbitration

A federal judge compelled the users suing over the 2024 Dropbox Sign breach into individual arbitration — finding that by clicking 'I agree' to sign a document they had accepted Dropbox's terms — and then denied reconsideration, effectively shutting the class action out of court.

Legal Actions & LawsuitsCurrent / Ongoing Issues (2024–2026)Account Lockouts & Support Failures
Read documentation