New note added to my account that I do not recognize (Possible account breach?)
-
I just opened up the SimpleNote app, and found the following random note at the top of my list which is making me wonder if my account is compromised:
Build a Beautiful Bookshop: Sell stacks of popular page-turners in this relaxing indie gem.
[https://apps.apple.com/us/story/id1896607943] and
The note appears to contain text from an iOS App Store game, which I do not recognize, and have never seen before.
Looking at the history of the note, it was created yesterday (July 14) morning, at 8:19am, but I see not further details.
My question is, is there any way I can see an audit log/history, so that I can see if there are activities I do not recognize? Also, is there a way to see details about the note, such as which device it was created on?
I have already change my account password to be cautious. But please let me know if there’s anything else I can do.
-
Thanks for reaching out and for already taking the proactive step of changing your password — that’s exactly the right thing to do!
Regarding an audit log: Unfortunately, Simplenote doesn’t currently offer users a built-in access log or per-note device history. Note history in the app shows timestamps only, not the specific device a note was created on. If you can share your email, we can run some additional checks on our end. To do that, please email (email visible only to moderators and staff) and includea. reference to this thread.
One thing worth checking: The note content appears to come from an iOS App Store editorial. Is it possible you may have accidentally used the Share button in the App Store app and shared it to Simplenote? If Simplenote appears in your iOS share sheet, a stray tap could create a note like this without it feeling intentional.
Additional steps you can take:
- Enable a passcode lock in Simplenote (Settings → Passcode Lock) for an extra layer of protection
- Check that no old or shared devices are still logged in to your Simplenote account
- Run your email through haveibeenpwned.com (we’re not affiliated with them, but it’s a useful tool to see if your email has appeared in any known data breaches)
-
I considered the possibility that this was something I accidentally initiated. However, I don’t think that’s likely, as I do not recognize that iOS app at all, and I am not really in the habit of browsing the App Store often, least of all the games section (which this app appears to be from).
Anyway, thanks for responding. I haven’t experience anything further, so hopefully, changing my password is good enough for now.
-
Hi @jackgenesimplenote –
I’m glad to hear you haven’t experienced anything further here.
I’m going to mark this thread as resolved for now, but if you have any issues in the future, please reach out and we can take another look.
Simplenote Support Forums 