Sometime during 2012 a large number of the free Dropbox accounts had the login and password details hacked. There was considerable publicity at the time and users were urged to change their passwords.Unfortunately, it does appear that many people didn't react to this warning as they may have either missed the publicity or just plain forgot.
Dropbox has recently asked users that haven't changed their password since, to now do so.
