It seems to me that password reset notices from breached vendors is becoming a weekly occurrence. This time the notice comes from Evernote, letting all its users know their passwords have been reset because of a hack on its systems. The attackers made off with only email, usernames, and password information, but the passwords were salted and hashed and thus not as useful for malicious purposes.
Nevertheless, you should still change your password on Evernote as well as on any other site where you use the same password. And, as their message notes, don’t reset your password via links in email (even if there are such links in their email!) to avoid the almost inevitable phishing attempts which will come as a result of this breach.
