So how much info has Emma Healey had access too?

Yeah, but no-one does that, do they? That's what I'm trying to highlight.

but how do you prevent someone snapping a pic of the screen with their smartphone

Don't allow phones in the computer room.

it'sallgoingtobefine sure, you could place restrictions on machines....but how do you prevent someone snapping a pic of the screen with their smartphone? (Double devicing)

Who were, or are, her 'friends' in MNHQ? Are they still supplying her with inside info, or doing whatever else she's requesting?

ItsAllGoingToBeFine Thanks.

The users who had their IP addresses listed on twitter have been contacted by MNHQ.

It is not yet possible to know what other data she has that has not been posted.

In February we streamlined the number of people with access to those accounts beyond the community team hers (and others) access was removed

Was it removed because one of your interns was accessing data and taking it home?

I work in a call centre and the data we hold is temporary and not of a sensitive manner.
Our companies clients demand that our phones are not out at all, and it's instant dismissal if caught.
Allowances are made for emergency contact and supervisors can mind your phone if you are likely to be called out by family.

Yes.

JustineMumsnet

^Hi everyone.
Emma was an intern in the press office for 6 months until March and for a good portion of that time she did have access to the information in our user accounts pages. This is because part of her role involved occasionally contacting Mumsnetters to pass on media requests etc. In February we streamlined the number of people with access to those accounts beyond the community team hers (and others) access was removed.^

Did she, and others like her, have access to user's registration details such as email addresses?

Should interns have access to confidential information about users?

Silly Emma Healey, this won't look good on her CV.

Bloody hell. At times like this, I almost yearn for the days before the internet, social media etc. It's quite worrying to think about the new ways individuals can be attacked and harmed.

I thought a lot of staff worked from home? It would be impossible to prevent people from taking screenshots then.

Gosh, this is rather worrying. I don't blame MNHQ for this either, the blame lies with the ex HQer who "accidently" shared data online.
I hope they do something about it though.

I think pretty much anyone could, email them to a private device etc.

I worked in a place where we weren't allowed bring phones into the office for that very reason.

I work for financial services and we don't do all that. Mumsnet is a chat site.

I would have thought she'd taken stuff with her for precisely this purpose as why else would you bother?

Though I think it's likely she didn't realise what was on the earlier screenshot as any one of us could screen shot posts but she's done it whilst in the Mumsnet system, she might not have meant to.

I think she meant to cause a stink on twitter but not actually publish anyone's details. Surely no one would purposefully do this knowing it will point right back at them. Using their own account.

It easy enough to pinch screenshots of thinks from work if you've a mind too

I think pretty much anyone could, email them to a private device etc

-You could block print screen on the computers

-You could lock the computers to only be able to access Mumsnet / block access to personal email/ social media accounts

• You could require staff to leave mobile devices in a secure location in a different room.

This is all after the fact obviously, but there are fairly simply ways to prevent this sort of basic data theft. I expect Mumsnet kind of assumed that because they are a nice company they have nice employees too, and wouldn't need to take these sort of precautions.

But you obviously shouldn't! I'd be sacked and sued if I did that.

That and then posting them on Twitter.

Unbelievably stupid.

It easy enough to pinch screenshots of thinks from work if you've a mind too.

I think pretty much anyone could, email them to a private device etc.

But you obviously shouldn't! I'd be sacked and sued if I did that.

^^ exactly my concern MrsHathaway

This should be here too.