Please or to access all these features

Site stuff

Join our Innovation Panel to try new features early and help make Mumsnet better.

See all MNHQ comments on this thread

Update on the recent sharing of three users' IP addresses

103 replies

KateMumsnet · 19/04/2018 17:57

Hi everyone

As many of you already know, some screenshots of Mumsnet posts were recently uploaded to Twitter by a former Mumsnet intern - here’s a link to a a previous thread discussing this.

Three of the screenshots showed an Admin’s view of the site, and therefore contained the IP addresses of the posters concerned.

Understandably, there are lots of questions about this, and we thought it best to address them in one stab over here.

Please do post any queries here, or [email protected] if you’ve any concerns or have further questions.

Thanks
MNHQ

OP posts:
leghoul · 19/04/2018 21:16

In the context of a data breach which could leave users identifiable through email addresses and LinkedIn/ facebook/ whatever, then the data sensitivity of information posted on the forum would surely change in light of the breach? Seeing as it was posted anonymously, not written with names stamped all over it
not my field but think this would be logically arguable

Weezol · 19/04/2018 21:16

Thank you Justine.

JustineMumsnet · 19/04/2018 21:11

@FrancisCrawford

we hope the knowledge that Justine believes there not to be an ongoing problem here will make people feel less uneasy

Given that Justine has stated in writing that MN do not have any data that falls into the “sensitive personal data” category, which is 100% wrong and shows a total lack of understanding about data protection, that does nothing to make me feel less uneasy.

What people volunteer to post is not classed as Sensitive Personal Data FrancisCrawford. Any sensitive data that we ask for/collect (eg medical info) then we have a legal obligation to make sure we protect it. If people volunteer that info to a public forum that’s a different thing.

ChampiontheWonderHamster · 19/04/2018 21:11

This reply has been deleted

Message withdrawn at poster's request.

JustineMumsnet · 19/04/2018 21:08

@Weezol

The title of this thread is pretty poor. I'm sure the words 'Data Breach' would make a lot more users aware of this.

I'd hate to think MNHQ is being intentionally ambiguous, but given some of the posts from @JustineMumsnet last night and this morning, I can't help wondering.

Here you go

FrancisCrawford · 19/04/2018 21:07

This reply has been deleted

Message withdrawn at poster's request.

Weezol · 19/04/2018 21:03

The title of this thread is pretty poor. I'm sure the words 'Data Breach' would make a lot more users aware of this.

I'd hate to think MNHQ is being intentionally ambiguous, but given some of the posts from @JustineMumsnet last night and this morning, I can't help wondering.

leghoul · 19/04/2018 21:02

What happens to the data given to MNHQ if you apply to competitions and tick the box saying do as you will with my data? Apologies if this answered elsewhere, like the small print of the box.. but in light of this and GDPR and so on, will users be able to stop the future use of this information? And can admins etc see this as part of the user profile?

PleaseDontGoadTheToad · 19/04/2018 20:58

So she says...

WomanLifeIsGoodish · 19/04/2018 20:58

From the guardian article:

A spokesperson for Mumsnet said Healey had now promised to delete all other Mumsnet-related material.

Which suggests to me those 3 screen grabs were not the only data stolen.

But hey, she’s promised to delete it, so, s’all good man!

namechanz · 19/04/2018 20:56

pleasedontgetthetoad I want to know the answer to that one too SmileSmile

PleaseDontGoadTheToad · 19/04/2018 20:51

And yes, I hope MN are taking Emma's claims that she has friends still working at MN who are leaking her information seriously. She might be lying but equally she might not be. I feel a bit iffy posting on here now tbh and won't feel secure again until after we can safely say nothing is being leaked from HQ.

BoreOfWhabylon · 19/04/2018 20:50

Cotswold Justine has already denied categorically on the other thread that EH was a friend, relative or known to anyone at MNHQ

None other than an employee! No relation, friend of a friend, third cousin once removed. Nada. Niente. Nothing. Cross my heart and hope to die!

PleaseDontGoadTheToad · 19/04/2018 20:49

If I dereg then will all the data you have about me be deleted? Or will MN still have access to it?

NerrSnerr · 19/04/2018 20:43

Thank you @spontaneousgiventime

CotswoldStrife · 19/04/2018 20:33

I'm going to add to my earlier post about asking if she is related to any of the staff or owners at MN and ask if the selection procedure was followed completely (including references) and if she applied for the post in the normal way or was put forward by a friend or relation of someone at MN such as Justine.

thatwouldbeanecumenicalmatter · 19/04/2018 20:21

we have spoken to the intern and Justine has said that's her firm belief

Dishonest liars sometimes are dishonest, and lie.

I know, that's a shocking revelation.

^^ Erm yes this!

Emma only got found out because an eagle eyed MNetter saw that tweet out of all the millions of tweets made that day/week/month - she didn’t fess up or hand herself in. I wouldn’t be taking her word on that single screen shot being the only breach of members privacy. It’s like when a cheat gets found out by their partner that they’ve been cheating - they’ll only admit to what they think you know/the bare minimum.

I appreciate the steps you have take MNHQ and I sincerely hope that the police do take this further and would like to be kept updated on the outcome.

VioletCharlotte · 19/04/2018 20:19

Sorry posted too soon..
And a clause in their contract about data protection?

Because a poster earlier today, who said she used to work at Mumsnet said she didn't believe their was.

VioletCharlotte · 19/04/2018 20:18

@KateMumsnet
Please can you advise whether the intern would have had access to ALL my data? So, full name and email address provided at sign up AND all of my posting history?

And also, can you tell us whether employees all have mandatory data protection training and a clause in their contract

KatherinaMinola · 19/04/2018 20:17

Thank you. This is a helpful summary. I'm glad the matter has been reported to the police.

I agree that the tweet above also needs to be referred to the police.

Are you conducting an investigation into Emma Healey's claims that she still has friends at MN who might make moderation decisions at her suggestion? Because we don't know what else they might do at her suggestion.

I do not believe for one moment that those are the only screenshots she took or the only data she stole whilst at MNHQ. But I suppose that this is in the hands of the police now?

Her "apology" is a joke.

Yarnswift · 19/04/2018 20:17

I’d like to ask how you can be sure that no name identifiable info was stolen? MNHQ had my home address and name from a competition and it’s critical that doesn’t get into the public domain. I’ve de and re registered under this name but if it was taken it was taken. It would be simple to pop all that on a thumb drive and unless you’ve got a fully accountable access trail you can’t rule it out.

I honestly wouldn’t take this woman’s word for anything. Of course she will say she didn’t do anything else. The tweet above is a direct threat to release identifiable info and that could be life threatening for women with violent exes. It could lose people jobs. It has real world impacts.

I really hope the ICO and the police take this further or it will encourage other extremists to do similar. Hopefully the ICO are advising you on security measures. Hopefully the police will prosecute.

Gin MNHQ... what a week, eh?

CrochetBelle · 19/04/2018 20:16

Slightly off-topic, but important in knowing who our information is shared with, you say...
The intern needed access to user information in order to carry out her work duties, which included contacting MNers to pass on press enquiries.

What type of press enquiries? Why would the press need to contact a Talk user? And how often does that happen to have it specifically written into the 'work duties' of a member of staff?

What else were her 'work duties'? Comprehensively, please...

ChardonnaysPrettySister · 19/04/2018 20:09

I asked on a separate thread, but I will ask again.

If I signed up with an email but then changed my account details and switched to a different one, then is my old one still visible to the mods or is it just the current one?

I would think many of us would like to know, especially now.

NerrSnerr · 19/04/2018 20:06

Can someone point me in the direction of the thread where MNHQ shared her apology as I'm curious what she said. I have looked at a couple of threads but can't find it.