The breach occurred in 2012 after hackers had used stolen employee login details to access a document containing the email address and passwords of users. Dropbox, which found some account details linked to the incident, is forcing users, who opened their account before the middle of 2012 to change their passwords.