Child Item

Did someone else access my account and delete files?

I suspect my account hacked today so I'd like to ask for some guidance.

1. I found some files missing. I am pretty sure I created a folder and copied some files into this folder and I have used them a few times over the past two weeks, but today I found both the folder and files are missing from my Dropbox. Surprisingly I can not see any record, under event, or deleted items for these files. So I am wondering if it is possible for the hackers to delete them completely and they can never been restored? I thought it will be kept by Dropbox for 30 days as a minimum.

2. I can see a unknown computer has visited my account so I am wondering if Dropbox can provide additional details.

Thanks,

Find more posts tagged with

Security

Account Access

Disagree

Accepted answers

Mark

Yes the 30 days record doesnt apply if something is permanently deleted - by that all record of said file (events etc.) is also removed.

The ONLY info available is https://www.dropbox.com/account/security. Nothing else is stored / kept.

All comments

Mark

Hi @AWei

1) if the files are permanently removed they disappear from both Events and Deleted items. Files are recoverable for 30 days but only if not permanently deleted. If they are there is no recovery.

2) the only info about the device is what you see on that page I'm afraid. Dropbox has/stores no other info.

I assume you've not secured your account/reset password/set up 2FA etc. ?

AWei

Thanks for your response Mark.

For the first question, my understanding is if file are permanently deleted, even within 30 days, then all the event history and deletion history related to these files will also be removed. Is it corret?

For the second question, I can see the suspicious computer name was added into the device list, so I assume IP address and accurate time is not recorded by Dropbox?

Mark

Yes the 30 days record doesnt apply if something is permanently deleted - by that all record of said file (events etc.) is also removed.

The ONLY info available is https://www.dropbox.com/account/security. Nothing else is stored / kept.

Rich

@AWei wrote:
I can see the suspicious computer name was added into the device list, so I assume IP address and accurate time is not recorded by Dropbox?

If you hover over the i symbol in the Most recent activity column, you'll see the IP address.

Australia

My account was hacked four days ago, and the hacker permanently deleted all my files.

Every file and folder, without exception, is gone—permanently erased.

We exhausted every avenue—Rewind, Cached, even deleting folders—but nothing yielded results.

This situation is utterly disgraceful. Dropbox offers no backup option from its server, leaving users vulnerable to irretrievable loss.

Shame on Dropbox—this lack of foresight and security measures is unacceptable."

Australia

My account was also hacked four days ago, and the hacker permanently deleted all my files.

Every file and folder, without exception, is gone—permanently erased.

We exhausted every avenue—Rewind, Cached, even deleting folders—but nothing yielded results.

This situation is utterly disgraceful. Dropbox offers no backup option from its server, leaving users vulnerable to irretrievable loss.

Shame on Dropbox—this lack of foresight and security measures is unacceptable.

Australia

My account was also hacked four days ago, and the hacker permanently deleted all my files.

Every file and folder, without exception, is gone—permanently erased.

We exhausted every avenue—Rewind, Cached, even deleting folders—but nothing yielded results.

This situation is utterly disgraceful. Dropbox offers no backup option from its server, leaving users vulnerable to irretrievable loss.

Shame on Dropbox—this lack of foresight and security measures is unacceptable.