Dropbox has notified a subset of customers that intruders got into their accounts by abusing a weakness in Lenovo's email verification system to create bogus Lenovo IDs. The flaw allowed outsiders to gain unauthorized entry to those users' stored accounts and files.
Read the full story at Bleeping Computer