The online information storage company Evernote has been hacked, prompting the Californian-based firm to advise all of its users to change their passwords.
Evernote functions like an online organiser, allowing users to save data such as images, webpages, video clips, notes and more to a cloud hosted account.
As a result of the security breach, Evernote said that usernames, email addresses and encrypted passwords were accessed, but oddly enough the company insisted that there was no evidence that users’ payment details or stored content were accessed, changed or deleted.
On Saturday, a posting on the Evernote blog (which was also sent to all Evernote users as an email) explained what had gone on:
“Evernote’s Operations & Security team has discovered and blocked suspicious activity on the Evernote network that appears to have been a coordinated attempt to access secure areas of the Evernote Service.
In our security investigation, we have found no evidence that any of the content you store in Evernote was accessed, changed or lost. We also have no evidence that any payment information for Evernote Premium or Evernote Business customers was accessed.
The investigation has shown, however, that the individual(s) responsible were able to gain access to Evernote user information, which includes usernames, email addresses associated with Evernote accounts and encrypted passwords. Even though this information was accessed, the passwords stored by Evernote are protected by one-way encryption.”
There are further instructions on the Evernote site explaining what you need to do change your password. Unfortunately it is becoming increasingly common to hear of large companies and networks being the victim of hacking attacks, but at least in this case it appears that no lasting damage was inflicted.
Do you use Evernote? What is your reaction to the whole incident? Feel free to leave a comment below with your thoughts.