Dropbox has released a statement about the hack, further clarifying what has happened: Earlier this week, a proactive password reset covered all the accounts affected by the Dropbox hack. However, given that the details have been stolen since 2012, a four-year gap remains in which millions of Dropbox users’ data was not as secure as they would have hoped. Side note: Dropbox had 100M total users in 2012.

The Hack Probably Didn’t Do Any Damage

There’s a silver lining: There’s no evidence of foul play tied to the use of the account data, just in the initial hack that stole it. Dropbox, at least, has seen “no evidence of malicious access of these accounts,” according to a spokesperson. Motherboard further explains the reasons why: Most of the damage dealt out in the Dropbox hack, it seems, was to Dropbox’s reputation. They responded as best they could, but their business model as an online cloud storage platform makes them a ready target for over-eager hackers.