#Evernote suspicious activity password

The company said in a statement to InformationWeek that it already planned on introducing a two-factor authentication system later this year for added security, and that those plans have now been accelerated. While it is advised that users reset passwords any time there is indication of a security breach, it is not often a requirement (for example, after a LinkedIn breach last year, the company advised users to reset their passwords, but did not require them to do so unless their passwords were known to be compromised).

#Evernote suspicious activity password

The system-wide password reset requirement is relatively rare for services as large as Evernote, which has about 50 million users.

Despite this, the service required a system-wide password reset for all users. The company points out that the accessed passwords are protected by one-way encryption. While the post points out that no user content or payment information seems compromised, it does acknowledge that the attackers were able to access information, including usernames, email addresses associated with accounts and encrypted passwords. “Evernote’s Operations & Security team has discovered and blocked suspicious activity on the Evernote network that appears to have been a coordinated attempt to access secure areas of the Evernote service,” said the company in a blog post. The breach also highlights the importance of cutting-edge university programs that prepare cybersecurity professionals to protect sensitive computer systems. While the company reports that no user content or payment information appears to have been accessed, changed or lost, the breach once again highlights the importance of two-factor authentication for passwords for all systems, whether cloud-based or not. Evernote recently became the latest service to acknowledge what appears to be a widespread security breach.