I haven't used my Evernote account in sometime because I no longer used Windows. I received an email today saying I had a login to my Evernote account so I checked it out..
My account had been used since nearly the same date as the original poster. When I realized this I secured my account by changing my password, removing all other connected devices and enabling 2FA.
I generally stay abreast of current security vulnerabilities and other types of hacks. I hadn't heard of any Evernote hacks.
If this same style of attack was used successfully against both the original posted and myself there are likely many, many more people affected. I expect Evernote to fully investigate this.
Thank you.
PS: The image below shows all of my logins since June. Only the most recent and obfuscated login is from me. I do not have Windows nor do I have an iPhone. It clearly aligns with the dates of this post so I strongly believe this is bigger than just the original poster and myself.