Evernote Forces Password Reset for 50M Users
Summary: Evernote forced all 50 million of its users to reset their passwords after intruders gained access to customer usernames, email addresses and encrypted passwords. The company said it found no evidence that stored note content was accessed, changed or lost, and no indication that payment information for Premium or Business customers was accessed.
What's compelling: The passwords were hashed and salted, but Krebs notes the industry-standard hashing scheme is weak enough that most passwords can be cracked quickly with off-the-shelf hardware - so for 50 million users, the breach exposed credential material that may not stay protected.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026