I've just logged into someone else's account, using my own details?

The last time a date breach happened (I was under another name) I was still getting grief a year later. Paypal was accessed and in turn my bank account and netflix. Bloody irritating.

About an hour ago I noticed that OP's post was no longer highlighted on a thread I was reading. It seems that I was logged out between one page and the next. I've logged back in to my own account ok.

I was logged out earlier by mn and couldn't log back in on my tablet or phone but could on a PC so if anyone else in the same boat try a PC, it may work.

I was logged out this morning and had to log back in and look up the details but that was not a big issue and probably a safety precaution at the MN end.

I once had a message to say I had a PM and I hadn't. They never worked out what had happened. I've just had to log in but I haven't logged out.

Another one wanting total assurance that this won't happen again

I think we've got plenty of evidence that they can't make that assurance. The tone of official replies on this thread probably tells you all you need to know!

I'm really concerned that users haven't been notified of this breach yet.
If someone accessed my account, they could see my email address, the same email address I use on Twitter. From Twitter, it can be figured out where my children go to school (all LA schools here use Twitter as an official source of information for parents). Given the threats many women have received here from, especially, the feminist boards, I don't want people to know where my kids go to school!

I would also like the ability to delete username history. Since it doesn't exist I have deleted my entire account and re-registered. I'd already made sure not to use an email address that contains my name due to mumsnet's appalling security record, but one of my old usernames was potentially identifying.

I am fine on my iPhone, but can't log in on my desktop, Chrome. I've put in my email address and gone to the next screen, put in my password and nothing happens.

I've also been logged out and had to log in again. Deeply concerned about this guys, this is a serious data breach. Horrified at the idea someone random could log in as me and see all my stuff, what the hell?!

Oh my this happened to me in the middle of the night, I logged in via my iPhone and weirdly i was not asked for my details as I never leave it on "keep me logged in" and went straight onto the main page and when I clicked threads I'm on there were none as opposed to half a dozen or so last night.
Then I checked my username and it was a number. I have never had a "userxxx" type name and have been zoflo for years.

My anxiety is through the roof. I have pretty sensitive information I wouldn't like anyone to see. The explanation given doesn't really tally with the glitch. How did that enable us and others to see other peoples accounts?

Another one wanting total assurance that this won't happen again :(

I thought Jeffreygate was username and password, I don't recall it ever involved email addresses. I was on that list, and I only saw my username and password, never the email.

I got logged out overnight but didn’t have to put my password in to log in?!

I keep getting randomly logged out even when just refreshing the page.

@burrobirra
I've now been logged out and I've logged back in

I have changed my username slightly to check the password that I just changed and I think it worked.

Luckily I haven't got any sensitive stuff on here but thought it was best to change it anyway

Just checked my email on Have I Been Pwned and seems OK at the moment

Opps, cross post.

@ZeroFuchsGiven that's a very common scam that has nothing to do with mumsnet, we get them all the time at work.

It doesn't actually mean you've been hacked - more likely they got your password and email from a leak from another website where whole streams of data have been compromised. It's certainly not instant.

This might be useful to read if you're worried www.eff.org/deeplinks/2018/07/sextortion-scam-what-do-if-you-get-latest-phishing-spam-demanding-bitcoin

Ok so to the person whose account I was logged into and notified - I've got a message with the title 'Thanks' but then it says 'This message has been removed at user request'. So cheers for that. I think it's helpful for those involved to alert the other poster then the latter can check up and see that it's not an utterly batshit poster who got into their account, and the timings.

@AnchorDownDeepBreath Thank You, I just thought I should mention it, I'm not up with all this technology stuff but know the only way they could have got the PW is off that list :)

I did used to have that password for a lot of things but I changed it after Jeffreygate as I was on the list of email addresses and passwords, I no longer use that password after it was published but I have no idea how they could know it, only off that list. Could this have anything to do with it? Has someone got hold of that list and is messing with peoples accounts?

That list has been widely circulated online. There is a website (Have I been pwned) which can tell you any data breaches that your email address has been involved in. Mine has been involved in a lot more since Jeffreygate, but once your email and password are out there, it becomes easier to guess - people tend to stick to similar password types and formats.

The "You've been watching porn" email is doing the rounds at the moment to a lot of people who are on those lists, and that is likely to be completely unrelated to this breach, to be fair to Mumsnet. It's sent using a macro that inputs the password from the pwn lists into each email to make it seem more legit.

I'm also unable to log in on Chrome. I've reset my password, but still doesn't work. I've had to download the app especially (and I don't like it!)

Lilly thank you.

@MNHQ I missed all this last night but something very strange happened yesterday and I was coming here to report it this morning. I received an email yesterday demanding money basically saying I had been watching Porn and they had remotely captured a video of me doing so, if I did not pay up they would share this all over my social media etc. Obviously it is just a scam/spam BUT they said we know your password and they actually told me my password.

I did used to have that password for a lot of things but I changed it after Jeffreygate as I was on the list of email addresses and passwords, I no longer use that password after it was published but I have no idea how they could know it, only off that list. Could this have anything to do with it? Has someone got hold of that list and is messing with peoples accounts?