Evernote Resets All Passwords : Security Breach Notice

[Nick Hesson]

A big heads up to those of you using Evernote! Earlier today, the team behind the popular note taking application reported that customer data had been breached and accessed by a third party providing the hacker with usernames, passwords, and email addresses. On the bright side, any user content stored within Evernote was reportedly safe from this breach.

Thankfully all user passwords are encrypted, however Evernote is taking all precautions and as a result has reset the passwords on all accounts.

Read More on Evernote's Blog: Security Notice: Service-wide Password Reset | Evernote

In our security investigation, we have found no evidence that any of the content you store in Evernote was accessed, changed or lost. We also have no evidence that any payment information for Evernote Premium or Evernote Business customers was accessed.

The investigation has shown, however, that the individual(s) responsible were able to gain access to Evernote user information, which includes usernames, email addresses associated with Evernote accounts and encrypted passwords. Even though this information was accessed, the passwords stored by Evernote are protected by one-way encryption. (In technical terms, they are hashed and salted.)

While our password encryption measures are robust, we are taking additional steps to ensure that your personal data remains secure. This means that, in an abundance of caution, we are requiring all users to reset their Evernote account passwords. Please create a new password by signing into your account on evernote.com. After signing in, you will be prompted to enter your new password. Once you have reset your password on evernote.com, you will need to enter this new password in other Evernote apps that you use. We are also releasing updates to several of our apps to make the password change process easier, so please check for updates over the next several hours.

As a side note, MacStories has reported a new update for the Mac version of Evernote, currently available for non Mac Store users, as they await Apple's approval. The new update addresses the security issue at hand for password resets, as well as adding some new features, such as Quciknote, a redesigned menubar helper.



Anyone else experience issues with this security breach?

[XweAponX]

Yow, I use this app all the time

[JazJon]

I heard a rumor. Apparently upper management wouldn't implement a security enhancement "someone" suggested more than a year ago.