I've been personally affected by this leak. All the e-mail addresses that I am now receiving spam on have only been used for Dropbox purposes and nothing else. In addition this was over a year ago. So - email only used for dropbox, last transferred over the web a year ago: where else would it have been leaked from?

// I did change the title to not mislead readers.