Report
Dropbox by the numbers
The documented record, in data: what the archive's issues add up to across severity, category, and time — and the patterns underneath them.
By severity
By category
Over time
Issues span 1986–2026 across 16 active years, peaking in 2025 (27 issues) as breach fallout, layoffs, product shutdowns, and the AI pivot converged. Browse any year in the timeline.
What it adds up to: five recurring patterns
1. The provider holds your keys
Dropbox encrypts files server-side but keeps the decryption keys, so a breach, a government demand, or its own staff can reach readable file content. Nearly every privacy and government-access entry traces back to this one design choice.
See the evidence →2. Acquire, promote, then kill
Mailbox, Carousel, Spaces, Passwords, Vault, Capture, Boxcryptor — a repeated cycle of building or buying products users adopt, then sunsetting them, training users not to depend on anything beyond core sync.
See the evidence →3. The breach long tail
The 2012 theft of ~68M credentials wasn't fully disclosed until 2016, forced a mass password reset, and was still being re-weaponized in the 2024 'Mother of All Breaches' — a reminder that a breach's consequences never really end.
See the evidence →4. Billing friction as a pattern
Surprise auto-renewals, denied refunds, and disappearing support tickets recur across 1,180+ BBB complaints, a 2018 regulator settlement, and 2025 consumer-law investigations.
See the evidence →5. Efficiency over people
Three layoff rounds in four years (2021, 2023, 2024) alongside heavy share buybacks and a stalled core business — a maturing company optimizing per-share metrics as growth fades.
See the evidence →Figures are computed live from the Dropbox Watchdog archive (195 sourced issues). Dropbox Watchdog is independent and not affiliated with Dropbox, Inc.