Evernote hacked users asked to change passwords ASAP!

By
On March 4, 2013

If you are using Evernote then this might be a good time to change your password. A few days ago the company sent an e-mail to all members, revealing that there had been suspicious activity on its network that looked like a hacking attempt.

In a blog post on Saturday, it was revealed that Evernote’s Operations & Security team has discovered and blocked suspicious activity on the Evernote network that appears to have been a coordinated attempt to access secure areas of the Evernote Service. A subsequent investigation showed no signs that user content had been accessed, changed, or lost. There were also no signs that payment information for any customers had been accessed.

The hackers were able, though, to access Evernote user information, including usernames, email addresses associated with accounts, and encrypted passwords. The passwords stored by Evernote feature one-way encryption, meaning they are both hashed and salted.

Screen Shot 2013-03-04 at 1.38.00 PM

Evernote now requires users to create a new password by signing into their accounts on evernote.com. Upon resetting their passwords, users will have to sign in using that password on any other Evernote apps they use.

On their blog Evernote added several important steps that you can take to ensure that your data on any site, including Evernote, is secure:

  • Avoid using simple passwords based on dictionary words
  • Never use the same password on multiple sites or services
  • Never click on ‘reset password’ requests in emails — instead go directly to the service