Traumatized and trying to close down old accounts I don't use anymore.Note-taking service Evernote today released a statement announcing that it had discovered suspicious activity on the Evernote network, which prompted it to issue a service-wide password reset. Account open to the world for a whole month.

Shitty Evernote suspicious activity notification. TL DR: Forgot about my old Evernote account, insufficient security. I presume they don't want the issue to be reported too often there. When I tried to post this issue in their forum, my post somehow disappeared (I am LV1 so needed approval from a moderator). Furthermore, this is not a new issue and I seems to be rampant. Longer detection period means more data stolen, possibly by multiple parties.

They allowed the hackers to run free in my account for a whole month. Especially given the obvious pattern of the suspicious activities. I don't think it is ok for Evernote to be so lax in their intrusion detection, let alone intrusion prevention. Then I realized my account has been accessed from all around the world (Brazil, Congo, Korea, Japan, Indonesia, Germany, Mozambic, India + others - probably proxies) practically everyday since 4/15. Intrigued but overly worried, I checked my access history. On the 14th of May, I received an email alerting of a new login into my account. Hence I didn't activate it on my account.

I have not been a frequent evernote user for a couple years already and when I created the account, the 2FA wasn't available. I am usually quite cautious but I forgot about this account. It has probably leaked from another website. My password has been compromised somehow even though it wasn't showing as such on. Let me preface this by saying that I do not hold Evernote accountable for the initial breach.

Email evernote suspicious activity