Dropbox accounts breached through Lenovo email verification flaw