Update on the recent sharing of three users' IP addresses

[KateMumsnet]

Hi everyone

As many of you already know, some screenshots of Mumsnet posts were recently uploaded to Twitter by a former Mumsnet intern - here’s a link to a a previous thread discussing this.

Three of the screenshots showed an Admin’s view of the site, and therefore contained the IP addresses of the posters concerned.

Understandably, there are lots of questions about this, and we thought it best to address them in one stab over here.

Please do post any queries here, or [email protected] if you’ve any concerns or have further questions.

Thanks
MNHQ

[misscockerspaniel]

Thanks

[Ihavenofuckstogive]

Thanks MNHQ.

[HopScotchy]

The 'maximum' data isn't a complete list of information users are able to supply optionally? There are also fields to complete your kids names and DOBs. Also, the delete account link in my Mumsnet seems to be broken and just takes me to the homepage.

[NauticalDisaster]

What steps have been taken to determine what other data may have been stolen? Has EH been compelled to hand over electronic devices to prove she has no further data?

[BitOfFun]

Looks good to me, and as much as you could reasonably do

[OlennasWimple]

Thanks for putting up this info, MNHQ, it's very helpful to have a summary in one place.

Can I just check: does this mean that you believe (because you explicitly asked and were assured that this is the case) that these were the only screen shots that your former intern took of the internal workings of the MN platform? Literally these one or two screenshots were all that she took and sent to herself outside the MN IT system?

[MipMipMip]

I won a mug from here so you had my address linked to my user name. Was that deleted immediately after postage? If not, why not and how was it stored?

[Hygge]

Is there a way to delete every post I've ever written, under every user name I've ever used, and then have all of my information taken off every single one of your records?

[picklemepopcorn]

Thank you for listening to requests about having specific threads for questions and information. It's really helpful.

[Hygge]

MipMipMip that is a good question.

MNHQ you've had my postal address before too?

Could she have stolen and broadcast that sort of information?

[Datun]

I have a personal question. My email address is identifying. If I get another email address, do I have to deregister and re-register? If so, can I keep the same username?

Or can I just tell you my new email address and swap them over on your records?

[ItsAllGoingToBeFine]

What steps have been taken to determine what other data may have been stolen

They asked Emma

[KeneftYakimoski]

Whilst an IP address on its own can’t identify an individual,

That's flatly untrue. My desktop machine has a unique IP number: I work for an organisation that has a /16, and therefore every machine has a unique and static IP number. It locates the machine to my desk (and until recently, was in the global DNS as "my-real-name.my-employer.tld")

I have a /28 at home, and therefore the desktop machines at home identify as funny-name.my-real-name.some-other-tld.

In both cases (and I am doing stuff about this right now: it's preyed on my mind for years that I need to sort it out, and this is the impetus) this is probably unwise. But I doubt I'm alone in this, that my IP number accurately and precisely locates me.

[Juells]

Or can I just tell you my new email address and swap them over on your records?

Can you not just change that in the Basic Details section?

[EmpressOfJurisfiction]

Kate, can your tech team be sure that she didn't insert any malware into your system?

And what's your response to the people who have pointed out tha the data she stole is sensitive when taken in conjunction with the very personal information that people may have posted about?

[spontaneousgiventime]

@Datun I changed my email address today, you don't need to dereg to swap to a new one. It's really simple tbf.

[KeneftYakimoski]

As mentioned above, we’re removing them from the general admin view of the site today, so from now on only relevant people at MNHQ will see this data.

One might ask: if they're so innocuous, as you claim, why have you moved so quickly to restrict access to something so harmless?

[HebeMumsnet]

Hi folks. Thanks for your thanks. And thanks again for your continued patience and understanding under some fairly trying circumstances.

We'll answer any questions we can as soon as we can, but do bear with us if we don't get to you straight away. We're a bit snowed under as you can imagine and there are lots of queries we'll need to go away and check on to give full answers.

So, OleannasWimple it sounds like we can't say that we know with 100% certainty that these were the only screenshots taken but yes, we have spoken to the intern and Justine has said that's her firm belief. Given the intern's apology today, which we published on another thread, it sounds very unlikely to us that there's anything more 'to come'. Obviously we know that we can't give a 100% firm promise on that so we do appreciate that it won't completely allay people's concerns but we do hope that it does go some way to making people feel less worried about that.

[ScarletBegonias]

Yes, you can change your email address in the settings section online. They'll send you an email at the new address for you to confirm the change.

I did it myself this afternoon - and changed the name Mumsnet addresses me by in emails at the same time.

[KeneftYakimoski]

we have spoken to the intern and Justine has said that's her firm belief

Dishonest liars sometimes are dishonest, and lie.

I know, that's a shocking revelation.

[KeneftYakimoski]

And what about the Intern's "friends" with MN, whom she boasted would be carrying on the work of exposing people? Do they exist? If so, who are they, and what has happened to them?

[HebeMumsnet]

Datun , yy. As previous posters have said, you should just be able to change that in your account. Give us a shout if you run into difficulties or anything.

[spontaneousgiventime]

HebeMumsnet Sorry, it doesn't allay my fears one little bit. MN have taken the word of a proven liar and thief who's sole aim was to cause maximum damage and harm to this site and its users.

Today I have; changed my password, changed my email address and had the post under a different username deleted as I am terrified I have posted too much personal information and the NN I use now is for the feminist board. No one knows what EH has stolen, and it could include;

Full names
Addresses
Email addresses
Children's names and DOB

She had access to all our user names, that means by going from one username to another she could easily build up quite a comprehensive picture of some posters. Saying you don't think she has taken more data is not good enough. GC women are threatened by TRA every day and EH was/is a TRA sympathiser/activist.