Dropbox hacked?

[Burly]

Got this email from dropbox (it's real):

We noticed that you recently signed in to Dropbox from a new country.

Is this you?

Country: Russian Federation
Signed in on: January 28, 2014 9:32 AM
​

I'm really concerned. I've changed my password and added 2 step verification for new devices.

I can only guess 2 ways in which someone got this:

• One of my devices is hacked. I find this unlikely.
• They guessed the password. It wasn't very strong. But who goes around guessing passwords? Isn't there a limit on the number of incorrect entries?

What should I be doing to secure myself? They could have all my data on Dropbox which could cause me problems.

 

[Qitarah]

Are you sure this wasn't a fishing mail? I.e,. A scam mail designed to get your login&password? Either way scanning your pc for spyware and the likes is the best bet.

 

[Burly]

Yep I'm sure it's from dropbox.

However the username/password combo was from other sites too. Maybe this is it.

 

[Rroff]

Sites will usually lock out an IP after 3-5 incorrect attempts but theres some bot nets out there just randomly trying random usernames and passwords constantly which eventually manage to log into some accounts just by pure chance (got the connection attempt logs from a couple of servers that show it in action).