This means that, in an abundance of caution, we are requiring all users to reset their Evernote account passwords. While our password encryption measures are robust, we are taking additional steps to ensure that your personal data remains secure.
(In technical terms, they are hashed and salted.) Even though this information was accessed, the passwords stored by Evernote are protected by one-way encryption. The investigation has shown, however, that the individual(s) responsible were able to gain access to Evernote user information, which includes usernames, email addresses associated with Evernote accounts and encrypted passwords. We also have no evidence that any payment information for Evernote Premium or Evernote Business customers was accessed. In our security investigation, we have found no evidence that any of the content you store in Evernote was accessed, changed or lost. Please read below for details and instructions. The following blog post is also being sent to all Evernote users as an email communication.Įvernote’s Operations & Security team has discovered and blocked suspicious activity on the Evernote network that appears to have been a coordinated attempt to access secure areas of the Evernote Service.Īs a precaution to protect your data, we have decided to implement a password reset. Here’s the full post - hat tip to Marco Arment for publishing this cache:
We take our responsibility to keep your data safe very seriously, and we’re constantly enhancing the security of our service infrastructure to protect Evernote and your content,” the note reads.Īpple, Microsoft, Facebook, Zendesk and Twitter have all been hit by hacks of late, although there is no suggestion at this point that the events at Evernote - or any of the others - are directly connected. “As recent events with other large services have demonstrated, this type of activity is becoming more common. That’s refreshing in an age when many companies are less clear when dealing with issues of cyber security.
The company is already winning praise for the way that it has approached this issue, being fully transparent with its details and wholly careful by enacting a full password reset. All users have been emailed and Evernote says it is updating its apps “over the next several hours”, as part of its security effort.
0 kommentar(er)
