Dropbox And Box Respond To Link-sharing Privacy Glitch
The company claimed it found tax returns, bank records, mortgage applications, blueprints and business plans, some of which it said were "perhaps sufficient for identity theft".
Via The Inquirer:
users are inadvertently exposing their personal data to all and sundry due to a security flaw in public link URLs.
Enterprise collaboration company Intralinks has gleefully reported the discovery made by its team during a "routine analysis of Google Adwords and Google Analytics data".
Hidden within the links were direct public URLs to documents in Dropbox and Box that could be clicked through, and in turn lead to the folder content pages, allowing any visitor full folder access.
The company claimed it found tax returns, bank records, mortgage applications, blueprints and business plans, som...