Quite an experience today! I haven't opened my Evernote account since 2015. Got an email from the security team today (Mar 26 2019) about suspicious activity. Unauthorized activity has been going on since January 2 to March 16 2019 from different parts of the world. Person has been using a Samsung phone exclusive only to Australia. Already changed my password, revoked access to the device and deleted any notes containing sensitive information (names, old numbers/addresses). Had to log off my account and use the new password to confirm that the device has been revoked. Hope this helps the Security Team and anyone going through a similar ordeal. Better caught late than never.