Product

Account sign-in (Lenovo ID linked login)

1 documented issue affecting Account sign-in (Lenovo ID linked login), most severe first.

4–21 August 2026 (disclosed 2 September 2026)5 sources

HighApproximately 5,000 accounts; files accessed in fewer than a third (about 1,500 by 9to5Mac's arithmetic)

The 2026 Lenovo ID sign-in flaw: ~5,000 Dropbox accounts entered without a Dropbox password

A flaw in how Lenovo verified account-holder email addresses let an attacker register a Lenovo ID on a victim's email, and Dropbox's Lenovo ID sign-in link then trusted that identity without ever asking for a Dropbox password — reaching roughly 5,000 accounts.

Security Incidents & Data BreachesCurrent / Ongoing Issues (2024–2026)

Read documentation

← All products A–Z index →Better alternatives →