Evernote Was Hacked And Your (Encrypted) Passwords Got Stolen

Illustration for article titled Evernote Was Hacked And Your (Encrypted) Passwords Got Stolen

If you go to log in to Evernote, you'll find that you have to reset your password. Why? Well according to a post on the official Evernote blog, they were hacked, and while no personal information was snatched, emails, usernames, and passwords were. Luckily, those passwords were encrypted, but better safe than sorry.


From the blog post:

Evernote's Operations & Security team has discovered and blocked suspicious activity on the Evernote network that appears to have been a coordinated attempt to access secure areas of the Evernote Service.

In our security investigation, we have found no evidence that any of the content you store in Evernote was accessed, changed or lost. We also have no evidence that any payment information for Evernote Premium or Evernote Business customers was accessed.

The investigation has shown, however, that the individual(s) responsible were able to gain access to Evernote user information, which includes usernames, email addresses associated with Evernote accounts and encrypted passwords. Even though this information was accessed, the passwords stored by Evernote are protected by one-way encryption. (In technical terms, they are hashed and salted.)

[Evernote via SlashGear]



What should I do if I want to clear all my Evernote data on their server? I've exported everything Offline. All years of notes since their existence. Yes we all know this was going to happen sooner or later but we're too lazy to admit that cloud is unsafe. Anyone know a sure way to clear your data completely off their server (or anywhere on the Internet?)