American note-taking software company Evernote has announced ‘disturbing’ news that it has been hacked.
After ‘suspicious activity’, in which the hacker(s) were able to gain access to Evernote user information, including usernames, email addresses associated with Evernote accounts and encrypted passwords, an estimated 50 million people were forced to reset their passwords.
Despite the notice on its website, plenty of irate users took to the company’s site to air their frustration, as many felt they should have been emailed about the compulsory password change.
One user said it was ‘inexcusable’ that no email was sent to users and another said the unexplained password reset actually prompted hacking fears.
A user nicknamed b737officeview, said: “This is really disturbing. I just signed up for Evernote and Evernote Premium just yesterday, after months of considering the best way to go paperless.
“It seems my fears were warranted as I didn’t even last 24 hours on Evernote without having my password reset and a leak of data occur.”
User Dave Yuhas added:”Evernote couldn’t have emailed this notice? I had to spend my time trying to figure out why I couldn’t access my account.”
“How about sending out the email first then reset passwords? Then perhaps I wouldn’t have thought logging in today was an attempt at phishing my password,” said user Howard Young.
A spokesman from Evernote said even though information was accessed, the passwords stored by Evernote are protected by one-way encryption.
On Saturday a notice appeared on the company’s website, which said: “While our password encryption measures are robust, we are taking additional steps to ensure that your personal data remains secure. This means that, in an abundance of caution, we are requiring all users to reset their Evernote account passwords.”
The company said it found no evidence that any of the content in Evernote was accessed, changed or lost. There was also no evidence that any payment information for Evernote Premium or Evernote Business customers was accessed.
Evernote also said it would be releasing updates to several of its apps to make the password change process easier.
[Image via hellofax]