Skip to main content
Question

How to get support for hacked account

  • July 13, 2026
  • 1 reply
  • 88 views
H

My account was accessed from another country. I've removed logged in devices, changed my password, and turned on 2FA but want to know if I can find out what files were copied from my Box account and what next steps I should do. I had some financially personal files in there.

 

I've already compiled a to-do list from a personal perspective (such as fraud alerts, flagging my accounts, notifying credit agencies, etc.).

 

I don't have a paid Box account so I can't directly open a support ticket.

    1 reply

    Rona Box
    • Rona Box
    • Community Manager
    • July 18, 2026

    Hi ​@Hackedvictim123,

    Welcome to Box Community and we’re here to ensure your data and account information are protected! 

     

    I am very sorry to hear that your account was accessed from another country. It is excellent that you have already taken the immediate, critical security steps of removing logged-in devices, changing your password, and enabling two-factor authentication (2FA).

    Here is how you can find out what files were copied or downloaded from your Box account, along with the next steps you should take regarding your personal financial files:

     

    Due to your current Box subscription, I’m afraid we can’t track your file activities. 

     

    Meanwhile, since you have already handled the immediate fraud alerts and credit agency notifications from a personal perspective, here are the specific steps you should take regarding your Box account and the compromised data:

    • Check if any of your sensitive folders or files have active Shared Links enabled. If a bad actor accessed your account, they may have generated public shared links to your files to access them later. Go to your files, check the sharing settings, and remove or restrict any shared links (especially those set to "People with the link" or "Public").
    • Look at the collaborator lists on your folders. Ensure no unauthorized email addresses were added as collaborators to your folders, which would grant them ongoing access.
    • Unauthorized users may have delete files after copying them. Check your Box Trash folder to ensure no important financial documents were deleted. If they were, you can easily restore them.
    • If you reused the password from your Box account on other websites, it is highly likely your credentials were leaked in an external breach (credential stuffing). Ensure you change your password on all other accounts where you used that same password, making sure to use a unique, strong password for each service.

     

    Hope it helps! Let us know if you have additional questions.

      Terms of ServiceAccessibility statement