Summary
- Environment: Directed Trust’s Dropbox Sign account
- Operational impact: Company says client portal and other systems were unaffected
- Financial impact: No confirmed incident cost quantified
- Record status: Developing record. Reviewed October 30, 2026; updated as evidence emerges.
What happened
Directed Trust discovered suspicious activity around July 7, 2026 involving its Dropbox Sign electronic-signature account. Investigators determined that an unauthorized actor accessed files containing personal information. [1]
Impact
Directed Trust limited the incident to documents submitted through that account. It said its client portal, other systems and customer account logins were unaffected. The public sample leaves the specific personal-information categories blank and supplies no population total. [1]
Timeline
Suspicious activity identified around this date
Directed Trust investigated access to its electronic-signature account.
[1]Document review completed
The review identified potentially affected personal information.
[1]Notification sample dated
The letter describes the account-specific incident and response. The notification sample provides the account.
[1]Briefing updated
This briefing was last reviewed and updated on October 30, 2026.
Threat Group & Attack Vector
The account-level access mechanism is not disclosed. This notice does not establish a compromise of Dropbox’s wider service. [1]
Actors
- No threat actor group has been identified in the reviewed public evidence.
TTPs
- No specific MITRE ATT&CK technique is currently mapped for this case.
Response
Directed Trust secured access, reviewed affected documents and completed that review on October 12. Its October 27 letter reported no evidence of fraudulent use and offered monitoring; the sample does not specify the service duration. [1]