At least it's a hack this time, it's not like when they forgot to enable authentication and you could sign-in to any Dropbox just by entering the e-mail.

https://techcrunch.com/2011/06/20/dropbox-security-bug-made-...