Dropbox has revealed a major attack on its digital signature (Dropbox Sign, formerly HelloSign) systems that saw customer data accessed by unknown and unauthorized entities.