I've just logged into someone else's account, using my own details?

Any update Mumsnet?

Bloody hell.

Yes, that's what I meant - 7:51 was you, 7:54 wasn't.

Unbelievable. Let's just not require passwords for name changes anymore. What can go wrong?

That's bizarre and seriously worrying, Espresso. So you, the real one, and someone else, through no fault of her own, are both posting on this thread within minutes of each other - while you are still logged in?

"I've got Espresso Butler here which is weird. I'll try logging out again. HQ needs to sort this out pdq."

Are you saying you're not the EB who posted a bit earlier (at 07:51:31), but you're someone else?

I can't believe this is still going on. Terrible data breach implications

Holy mackerel!

I don't understand the casual tone of HQ's replies???

And now you don't need to use your password to make name changes? Is this some sort of joke?

I'm off until this gets sorted.

I am a software tester and this sort of thing is the stuff of nightmares

MN will have had to take the decision to shut the site down, or continue as normal whilst behind the scenes they are trying to fix this

I imagine their dev team are on it, but fixing something as complex as this may take some time (the FB/google login systems add complications)

IMO this is not an uncommon thing to happen, as websites have become more complex, they are harder to monitor/test (and companies don't like to pay too much on boring old testing )

Ok Namechangedtest was me, trying out this no-password name change thing.

Test

Happened to me on Tuesday when I logged in on the site, I usually use the app. Logged out and back in again and it was correct.

This clearly isn't a one off and maybe MNHQ need to consider shutting the site while it's investigated.

At the very least login and changes should be suspended.

One gets the impression that @MNHQ see it as a bit of a tech glitch rather than a sodding great hole in security exposing their entire user base.

Crazy stuff! Anyone who got my username would be sadly disappointed that I don't post anything interesting confidential. I made it my policy years ago that I'd never post anything that I wouldn't want anyone I knew to read over my shoulder in RL.

But people can, and do, use this forum as a place to share their thoughts that they wouldn't tell a soul in RL, because they feel protected by the anonymity of name-changes. It must feel awful if that has been compromised.

This is a data breach which should be reported to the Information Commissioner I’m afraid.

Not sure if this is related but I keep being logged out and when I go to put my password in , says not recognised. I'm still me , same user name for the past think 2 years. iPhone if that helps. Sorry to crash thread

How do we know if our data is safe

You don't know and it plainly isn't safe.

I'm honestly surprised that login has not been temporarily suspended which this problem is running. It smacks of not understanding the importance of the issue, particularly on a site which encourages sharing of often quite personal information.

Its plain that it wasn't just a one off incident and it was reported more than 8hrs ago.

It may or may not be related to the changes a couple of days back but those changes are an obvious candidate to investigate. Its bad practice to allow account changes of any material kind without a password and you should also be logged out of all devices when you do change password.

Yes I changed my password on Monday on my work laptop

I expected to be logged out on Mumsnet on my home laptop as a result, as I think this has happened before, but I wasn't

In addition, I have previously logged out of Mumsnet on one device (e.g.) my phone, and found that I was logged out anywhere else I was using Mumsnet. This did not happen on Monday either

Um. How do we know if our data is safe.