From a compliance and data protection perspective, users should not be storing or sharing company data on personal Dropbox accounts. Unless a business happens to subscribe to a Dropbox business plan, blocking Dropbox makes sense anyway. Sjouwerman advises that businesses block access to Dropbox, because the malicious links and ransomware files use the Dropbox domain. KnowBe4 CEO Stu Sjouwerman points out that all of the tens of millions of records that have been compromised in data breaches make it significantly easier for attackers to compose more effective spear phishing attacks.

Just looking out for my fellow redditors.Pacman’s initial victim pool is small, but we can assume it will spread. Uploading your files to imgur automatically strips this data, and of course your real name isn't associated with your imgur account. If you want to safeguard your identity, I recommend at least scrubbing your images of the EXIF data. I saw someone link a gallery of their nudes from their personal Google Photos account, and sure enough the EXIF data was still there. If you have location settings on on your phone, and you upload a picture to one of these services, and then link back to that image on reddit, chances are your EXIF data is still retained in the picture, which means that someone can find out exactly where you took that pic and plot it on the map. The worst case scenario would be if the actual pictures still retain your EXIF data.

Someone can use very basic Googlefu and sites like SnoopSnoo to find out a *lot* of information on you just from that alone.

People will post an image of whatever to Reddit, linking back to their personal dropbox or their Google Photos account and their entire name is there on display. I'm just posting this as a PSA because I've seen this happen on Reddit three times in the last week.

Reddit dropbox nude link