Dropbox emailed about 5,000 customers that outsiders may have accessed their files through Lenovo ID logins. Dropbox has removed all Lenovo ID connections. Affected users were mainly those without two-step verification, and about one in three of those logged into was actually accessed. If your team uses Dropbox or signs in with Lenovo ID, check whether two-step verification is on for every account, review recent Dropbox activity, and change passwords where needed.