It looked briefly like Dropbox might have been hacked. But it really wasn’t.

Someone posted a big list of credentials on a sharing site. The credentials were likely obtained from various sources, but definitely not from Dropbox. Unfortunately, many people still re-use passwords for different services, and some of the credentials worked on Dropbox.