Unexpected connections from attackers without me having granted access

[alexmm 0]

On August 31st you e-mailed me about an attacker had logged in from a different location than usual (I live in Spain) and I was very worried (I have tried writing you via e-mail about several doubts but I cannot find a proper address so I write here):

Cita

Se ha producido un nuevo inicio de sesión en Evernote y queríamos asegurarnos de que has sido tú. Cuándo: Agosto 31, 2023 05:13:44 a. m. EDT Dónde: Swedesboro, New Jersey, United States Dirección IP: 194.53.140.248 Dispositivo/navegador: otro/otro

I went to the access history of that day and saw many many unexpected accesses from England, Germany but NOT United States:

Cita

Evernote for Windows Touch A Windows 8 Device	31/08/2023	192.142.244.212 (United Kingdom)
Evernote for Windows Touch A Windows 8 Device	31/08/2023	185.213.246.73 (United Kingdom)
Evernote for Windows Touch A Windows 8 Device	31/08/2023	178.171.89.82 (London, England, United Kingdom)
Evernote for Windows Touch A Windows 8 Device	31/08/2023	89.19.32.214 (Berlin, Land Berlin, Germany)
Evernote for Windows Touch A Windows 8 Device	31/08/2023	37.143.62.61 (Frankfurt am Main, Hesse, Germany)
Evernote for Windows Touch A Windows 8 Device	31/08/2023	31.204.3.95 (Berlin, Land Berlin, Germany)
Evernote for Windows Touch A Windows 8 Device	31/08/2023	213.209.140.55 (Berlin, Land Berlin, Germany)
Evernote for Windows Touch A Windows 8 Device	31/08/2023	195.234.91.151 (London, England, United Kingdom)
Evernote for Windows Touch A Windows 8 Device	31/08/2023	193.58.104.209 (City of Westminster, City of Westminster, United Kingdom)
Evernote for Windows Touch A Windows 8 Device	31/08/2023	176.118.37.222 (Berlin, Land Berlin, Germany)
Evernote for Windows Touch A Windows 8 Device	31/08/2023	89.19.33.80 (Berlin, Land Berlin, Germany)

 

I have several important questions:

1. Why was I informed about United States but it does not appear in the history?
2. My used devices are an Android + a browser. In the history the unexpected connections are from the device "Windows 8" and the app "Evernote for Windows Touch".
   1. I have never authorized/granted access to that device and app. How someone has been able to access using them?
   2. Why didn't I receive an e-mail or something to grant that access? (I would have rejected it)

Could you please explain how can this have happend? And more and more without me allowing the access (I was not e-mailed to grant the access; in Lastpass for instance it works like that).

[alexmm 0]

Hi, any one can help on understanding this?

It has happened again...

[Boot17 1,465]

Hi @alexmm. Subscribers can submit a request to Evernote support here: https://help.evernote.com/hc/requests/new

Evernote staff hardly ever answer questions posted in the user discussion forums.

As a fellow user, I have no knowledge of what you ask, but I'd suggest you change your password and especially make sure you have 2FA enabled on your account if you haven't done so already.

[PinkElephant 8,158]

No „you“ here, just other users.

How good is your account security ?

- Strong & unique password ?

- 2FA enabled ?

- Have you checked if your access credentials have been compromised by breaches in the internet ?

https://haveibeenpwned.com

Beside these questions: EN has informed you about access attempts to your account that the threat systems have seen as questionable. If they were questionable, only you can check. 

Using a VPN, Cloudflare services, DNS cloaks or similar measures by the user or his ISP can cause the systems to trigger. The responsibility for your individual account security rests with yourself - see the questions above.