Dropbox filed an 8-K with the SEC for a breach. User OAuth, API and MFA tokens
sec.gov
sec.gov
the user created title is a fair summary of why the document is important.
That may well be but it's not how HN titles work, as you probably know - it's described in the site docs.
It's not a self report, it's a mandatory report they agreed to when they decided to sell public shares. Telling your owners what you're doing with their shit isn't some nicety.