Dropbox data breach caused by authentication failure in single sign-on

Dropbox has emailed affected users to warn them of a security breach involving unauthorised access to their accounts. The root cause appears to be an authentication failure: attackers created a single sign-on option through a third-party provider without Dropbox enforcing proper verification. The company is notifying those affected.