Mumsnet data breach - please read

Ok I've had another call from a number Google doesn't recognise with too many digits.

Can I have an email to let me know if my account was breached or not please

All this pearl-clutching! Do calm yourselves, dearies.

I also have two listings of my current username in my nickname history @MNHQ.

I'm concerned that I've had an email from Mumsnet about this matter but not sent to the email that is registered with my Mumsnet account and to which Mumsnet have always sent emails before. They have sent an email to my hotmail account which I don't use for Mumsnet - what is happening here?

@C8H10N4O2, did you see today's google doodle? Brightens a morning.

Mumsnet have gone very quiet. It's over 9 hours since they have responded.

Dear Lord. The previous nine hours were midnight until 9am.

Even IT people need to sleep and if they have been working flat out since the breech it's a ridiculous thing to suggest they should work over a 24 hr shift!!! If nothing else because if you are that tired you are liable to make more silly mistakes. Thus making the cluster fuck worse not better.

As it is, the immediate problem was fixed by a reversal to a previous version of MN.

That means the ongoing issue is down to identifying where breeches occurred past tense. And whilst that is extremely important its not stay up all night important either.

I swear people sense of perspective and understanding of the real world and how things work is warped. People think that a magic wand can be waved and things happen and have no concept of human being being involved in the process.

Honestly I'm concerned about the lack if security knowledge that MN IT possess. Its below parr and MN need to do a lot better rather than acting like amateurs - because if they don't they'll end up with no business anyway.

But getting shirty because no one has replied between midnight and 9am???

Come on. Get a grip. Think about what you are saying and demanding. Its ridiculous.

No need to just use the new email address for just MN, its also quite handy for anything that might be a bit spammy like when you have to put one in for prize draws etc, also some shopping websites insist on an email address to access them, or else you would need a separate email address for everything, just have about 3 or 4 for different situations.

That's weird ... that last post on IPAD app is showing my username in purple but on my phone it's pink.

The plot thickens.

Late similar for me too. I closed my MN account yesterday then created a new email address just for MN then registered again. All as normal with new posts yesterday.

This am I am able to post on mobile app but my IPAD app is asking me to log in. Not going to go anything with that for time being I think.

I've not had any emails to either new or old address but from what I'm reading I can't yet assume I'm not affected.

Password reset issue

I reset my Mumsnet account password yesterday, between when mobile site users were force logged out, and app users were force logged out. I could then only log back into either the mobile site or iOS app using the old password though, despite getting a message onscreen that the password update was successful. Thought it might just be slow replicating the changes so tried it again now, but same outcome.

I've just reset the password again but can still only logon to the mobile site or iOS app with the old password. Quite concerned that the password change isn't being recognised.

@MNHQ
I just checked my iCloud Keychain and have the same thing - three usernames stored that I've never used

Can we please have a response on this one? Now reported by multiple users.

Just skimming the overnight updates I have these points to add:

• I also still have no email 20 odd hrs after we were told we had already been mailed. Its not in spam - I run my own mail server, no external filtering.

• People are still confused as to who is being mailed. Can we please update the OP to clarify who is being emailed, when and why?

• Its a big mail shot to send out but frankly if it takes more than 36 hrs to send out that volume of mail MNHQ need to change their batch mail provider.

• Regarding not keeping addresses for contact about a breach - GDPR allows you to keep email addresses for contact on account issues even if you opt out of marketing. This is again, standard industry practice. I'm astonished that opting out of marketing also opts me out of being informed of a data breach! Or is seriously what happens?

• Agree with PP someone should have been on shift overnight to respond to questions - its pretty poor that you persist in volunteers for the night shift the day after major data issue which is still not even fully defined.

• There should be a Breach Response in the TOM which is communicated and understood by staff, ready to be invoked. It isn't like this is the first time there has been a major issue on data security here. Its pretty much an annual event.

Yup I have duplicate username listed in my settings too

The duplicate username thing has been on mine for ages. It wasn't caused by this fuck-up.

Mumsnet have gone very quiet. It's over 9 hours since they have responded. Id like to think it's because they are busy fixing things but it feels more like they've discovered the issue is bigger than they thought?

Mine also has my current username twice, I changed it yesterday slightly when I changed my password.

My student sons would not say it was slopping English - they would say language changes. I regard an email as the email you write, just like a letter if the letter not your address. Other people use "your email" to mean your email address. I am probably the only person in England still calling something my mobile 'phone whereas most people say "their mobile". Anyway I am a bit off topic and MN's description of what might be at risk was certainly accurate.

Mine has duplicated usernames too.

And no email, generic or otherwise.

My account lists my previous usernames with KataraJean twice. But I would surely not be able to use this name twice? Is that usual?

Sloppy Enghlish oops

I also think this site has moved on from cosy have a gin messages

Just tried to dereg. Clicked on link 3 times. Page crashes

The trouble is the vague language and approach doesn’t reassure me completely that everyone has been contacted

MNHQ are you 100% certain everyone who has been breached knows?

Yes,, I know. I mentioned emails as that seemed the worst. Posting history you can search on the stie for. My email address probably people use an anonymous one. Account details could be a bit dull but the personal email messages sounded like the worst bit - Jane might have written to Mary about her fears her husband is abusing their child and doesn't want that spread around etc.

(Actually your point illustrates why English is so important. People have starting referring to someone's "email" as meaning their "email address" which I would never do. I would say access to email addresses. Sloppy Enghlish is using access to emails to mean access only to email addresses. The email is the personal message. I suppose it illustrates why we need to fight the good fight every day to stop people using the word email to mean email address when it means the email - the text of it - itself.)

However it sounds like some people had access to other people's emails.

No some posters had access to

your email address
your account details
your posting history
your personal messages

Having your email address is pretty shit, but being able to access personal messages is even more worrying. As some had already said on this thread there may be addresses, and other more outing information in personal messages. Which could put users security at risk if it was to end up in malicious hands.

There hasn't been a hack as far as I know. However it sounds like some people had access to other people's emails. Taht may not matter if it said meet you for a drink at starbucks but it might if it were the whole history of your divorce or legal problems. I have just about no emails on MN so not an issue for me but I can see that for some people it could be a big worry.