A hacker gained access to FormSpring's database in 2012 through an engineer's Dropbox account, exposing sensitive user information. The breach also revealed that the hacker obtained admin usernames and passwords from FormSpring's server.