Cloud notetaking service Evernote has been hacked, the company has revealed, with an unidentified attacker compromising servers and extracting usernames, email addresses, and encrypted passwords. The attack has forced a mandatory password reset, meaning all users must change their password before they can log back into their account, but Evernote says there is no evidence of either notes being viewed by a third-party, or payment details of Evernote Premium or Business users being accessed. Evernote has begun to notify all users by email of the breach, though the company is confident that data itself is safe. “The passwords stored by Evernote are protected by one-way encryption” Evernote said, “in technical terms, they are hashed and salted.”
