I never thought anyone would be interested in accessing my notes but yesterday I received an email from Evernote indicating a "new login to Evernote" from somewhere in Poland (I live in Canada). Due to my laziness I had not enabled 2 step login yet, so I immediately changed my password and enabled two-step verification. Also, when I registered Evernote app on a new laptop, I saw an unknown device listed as linked to my account and immediately revoked it. Crossing fingers (perhaps a bad assumption) that they don't have any sensitive information from my notes (most are encrypted for protection j