[aprendo]

Dropbox employees are custodians of that data. If they can’t protect it for whatever reason Dropbox is pretty clearly at fault. Their policy on how employees have to treat data is not good enough.

If a user had re-used a password Dropbox wouldn’t be to blame. But we are talking about a goddamn employee here. That makes Dropbox directly to blame.