Directed Trust Company
Jul 2026 · Graded Verified · Professional and Business Services · Government record
Incident summary
Directed Trust CompanyJul 2026
breach at Dropbox Sign
Not yet quantified
VVerifiedDirected Trust Company lost names, Social Security numbers, passport and license numbers, and financial and card data from files in its Dropbox Sign account, opened by an unauthorized actor from July 4 to 7, 2026, and noticed only around October 12. The filings do not say how that account was reached. The company stresses its client portal held, which only confirms the portal was never where the documents lived. An e-signature account became the perimeter, and nobody guarded it as one.
Professional and Business Services
California AG breach notification
About this record
This incident is on the public government record: an SEC 8-K filing or a state-regulator notification, graded Verified. Every figure links to the source it was read from; if we have read one wrong, tell us at info@hackerinahoodie.com. This index never sums figures across incidents. See the methodology.