Sounds like a bad hack.
A recent security incident involving Dropbox Sign - https://news.ycombinator.com/item?id=40233746 - May 2024 (59 comments)