Dropbox confirms user info was stolen, adds new security measures