Please or to access all these features

Site stuff

Join our Innovation Panel to try new features early and help make Mumsnet better.

See all MNHQ comments on this thread

My data has been breached

261 replies

Simbaya · 07/06/2022 16:05

Respond please.

OP posts:
RandomUser10093 · 07/06/2022 22:10

This reply has been withdrawn

This has been withdrawn by MNHQ at the poster's request.

LazyJayne · 07/06/2022 22:09

kimblerk · 07/06/2022 21:57

fucking hell, the absolute cheek of of posting the reported posts (which are the words of a twat to be fair but that’s not the point) to try and deflect blame. WHY did you include the reported posts on here @JustineMumsnet? You’re in email contact with OP so seriously, what was the reasoning behind that?

I don’t agree with this. The OP posted on an open forum in the first place. The posts were never private. She has then suggested that she was in some way targeted. Looking at the posts, it’s clear this isn’t the case.

A leak is a leak and needs to be taken seriously, but in this particular case the OP is suggesting it’s more serious than it is by insinuating she has been targeted by people who want to dox her rather than good intentioned users.

The seriousness of the series of internal failures that allowed this to happen is not impacted by cause of the leak (regardless of the cause, the failures should not have happened), but the seriousness of the outcome is. It was not a targeted attack, and that’s important.

AbsolutelyLoveIy · 07/06/2022 22:08

You know, I said it before on a thread on site stuff. That the IT is appalling your data management is woeful. You come across as a bunch of amateurs and it’s not good enough.

you don’t take any data breaches seriously enough

how many have there been?

dreamingofspain · 07/06/2022 22:08

FWIW It’s pretty obvious to me why the reported posts were posted here by Justine - the OP has been on this thread claiming that the reports were malicious. Yes it could have been sent to the OP by email but then everyone else here wouldn’t have known that there was no malicious activity and would have worried about it. I’m not sure you can complain about a lack of info from MNHQ and then also complain when you get it.

SlatsandFlaps · 07/06/2022 22:07

vipersnest1 · 07/06/2022 21:47

So, @SlatsandFlaps, would you be happy it's this happened to you? I know I wouldn't.
I don't have private and separate email addresses for all of the internet sites /web forums that I post on. I wouldn't use the mediums that I do if I had to, because I've put my trust in the sites that I use and it's a pain in the arse to have to log in if an app has been updated and I need to make a new password and re-submit a password.
That's all that should be necessary for a site like this.
@mnhq need to seriously get their arse into gear on this. I don't pay for Mumsnet prime or whatever the hell it's called, but I know plenty of people do. Between that and the revenue they make from ads, that surely should be enough to preserve the privacy of posters

It wouldn't bother me at all to be honest because I've nothing to hide!

I'm also not fussed about being outed 🤷🏼‍♀️ Just doesn't bother me personally at all.

Pixiedust1234 · 07/06/2022 21:58

BIWI · 07/06/2022 21:19

RTFT. Justine did that 20 minutes before you posted.

Do play nicely. It wasn't there when I started typing otherwise I wouldn't have posted the "nvm, crossposted" afterwards 🙄

@mn - that is really bad to have posted on an open thread her posts and reasons for deletion. That should have been in an email. Disgraceful.

Manekinek0 · 07/06/2022 21:58

I don't understand why posters are down playing this. JK Rowling has been doxxed and received death threats for holding different opinions to others. Leaking private information has the potential to lead to serious crime.

kimblerk · 07/06/2022 21:57

fucking hell, the absolute cheek of of posting the reported posts (which are the words of a twat to be fair but that’s not the point) to try and deflect blame. WHY did you include the reported posts on here @JustineMumsnet? You’re in email contact with OP so seriously, what was the reasoning behind that?

JustineMumsnet · 07/06/2022 21:52

Hi again, apologies, I can see that my response may have looked abrupt without context:

Here's what I posted on the thread about it when it happened in case you missed it:

JustineMumsnet

We had a temporary glitch with 'Report this post' for a short time today which meant the email of the person reported was included in the report and in a few cases in responses to those reports. This applies to a very small number of users and we'll be contacting them shortly to let them know. Our DPO has been informed and on his advice we'll report it the ICO if appropriate. Please be assured the issue is now fixed. We will of course be examining how it happened to ensure it never happens again. We're really sorry for any concern caused.

An update on this:

We emailed the affected users overnight offering to delete their posts, a retrospective name change or to change their email address. There are around 20 users affected.

The problem was caused by human error our end - our proper processes weren't followed. It started at 12.45pm yesterday and was fixed as soon as we were alerted (around 7pm).

It applied only to the emails/usernames of users who had posts reported (not to those doing the reporting). (Their details were included at the bottom of replies to the person who reported the post)

We know how the error occurred - we obviously have checks and balances in place to stop this kind of thing happening and in two very clear ways the proper procedures weren't followed in this instance.

We'll be reporting ourselves to the ICO today.

Obviously this is deeply disappointing and I understand that people are unnerved. I can assure you we are taking it very seriously internally to learn from it and make sure nothing like this can happen again.

I'm really sorry this has happened and apologise wholeheartedly to all those who've suffered undue concern as a result.

MooPiglet · 07/06/2022 21:50

Wow

PuggyMum · 07/06/2022 21:49

@DeaconBoo I imagine lots of posters will. Some people only need a couple of online breadcrumbs.....

Butitsnotfunnyisititsserious · 07/06/2022 21:48

That's really poor of Mumsnet and adding the posts in to the comment was a really petty move. Regardless of OP posts, they have a right to have their personal data kept private. There's a reason GDPR is such a big thing.

vipersnest1 · 07/06/2022 21:47

So, @SlatsandFlaps, would you be happy it's this happened to you? I know I wouldn't.
I don't have private and separate email addresses for all of the internet sites /web forums that I post on. I wouldn't use the mediums that I do if I had to, because I've put my trust in the sites that I use and it's a pain in the arse to have to log in if an app has been updated and I need to make a new password and re-submit a password.
That's all that should be necessary for a site like this.
@mnhq need to seriously get their arse into gear on this. I don't pay for Mumsnet prime or whatever the hell it's called, but I know plenty of people do. Between that and the revenue they make from ads, that surely should be enough to preserve the privacy of posters

treesurgeonsarefemaletoo · 07/06/2022 21:46

SlatsandFlaps · 07/06/2022 21:43

Am I the only one who has no idea what doxxing means? Perhaps I'm too old?! (at thirty flipping eight!)

Not sure it's safe too Google?!

Doxxing is posting hints or clues to someone’s real name, address or location on the internet. Enough to identify someone and their family. It’s usually wrapped up in a seemingly innocent post. Occasionally it will be a blatant full name and location.
The most scummy and low thing to do.

SolasAnla · 07/06/2022 21:45

molehill50 · 07/06/2022 20:01

If I were you OP I'd put in a FOI request to Mumsnet to ask for the names and email addresses of the people who have your address, if mumsnet wont tell you. And then fight your case if you aren't happy with the result. Good luck

@molehill50
I have not read past your post but:
MN will not give the OP the personal data of the 3 individuals who got her personal data (email address) as she is not entitled to it under GDPR. MNHQ would send a copy of the email but would have to redacte the email addresses.

OP if you have a very unique / identifiable name, while it is a bit late for MN you can have a "randomised" email account using gmail etc and just set a rule to forward messages to your main account or add the new account to your email manager app.

RandomUser10093 · 07/06/2022 21:44

This reply has been withdrawn

This has been withdrawn by MNHQ at the poster's request.

SlatsandFlaps · 07/06/2022 21:43

*to

SlatsandFlaps · 07/06/2022 21:43

Am I the only one who has no idea what doxxing means? Perhaps I'm too old?! (at thirty flipping eight!)

Not sure it's safe too Google?!

JamToastToday · 07/06/2022 21:42

This reply has been deleted

This has been withdrawn by MNHQ at the poster's request.

I did a double take at that post. How can anyone imagine this to be an appropriate response? It smacks of disdain and power tripping.

treesurgeonsarefemaletoo · 07/06/2022 21:40

DeaconBoo · 07/06/2022 21:37

Me too. "Your email isn't your data". etc. That's EXACTLY what it is. She's already said she's got a unique name.

If you wouldn't be happy to sign your full name under each of your public posts then you shouldn't be dismissing this.

And regardless of whether you personally would be ok with it, the forum's systems should be set up COMPLETELY with data protection as its very foundation. The fact that this could even happen accidentally is incredibly concerning.

Doxxing is massively serious. Have people not heard of police being falsely called out, workplaces and family being targeted etc?

I know that children and family members were harassed as a result of doxxing previously. The blasé attitude of some in here is extremely worrying.

RandomUser10093 · 07/06/2022 21:40

This reply has been withdrawn

This has been withdrawn by MNHQ at the poster's request.

DeaconBoo · 07/06/2022 21:40

Puggy if I were you I'd delete your account and set up a new one with a throwaway protonmail address or similar.

PuggyMum · 07/06/2022 21:38

Crikey I reckon I could be quite easily identified IRL from my email address coupled with my posts on here.

Quite worrying.

treesurgeonsarefemaletoo · 07/06/2022 21:37

This reply has been deleted

This has been withdrawn by MNHQ at the poster's request.

It’s not just the feminist section at risk, I lurked on a sub which doxxed several users of mumsnet just because they disagreed with them. Those who mock people being upset are unbelievably arrogant about what some oddballs will do with private information. It’s a sport for some inadequate creatures.

DeaconBoo · 07/06/2022 21:37

This reply has been deleted

This has been withdrawn by MNHQ at the poster's request.

Me too. "Your email isn't your data". etc. That's EXACTLY what it is. She's already said she's got a unique name.

If you wouldn't be happy to sign your full name under each of your public posts then you shouldn't be dismissing this.

And regardless of whether you personally would be ok with it, the forum's systems should be set up COMPLETELY with data protection as its very foundation. The fact that this could even happen accidentally is incredibly concerning.

Doxxing is massively serious. Have people not heard of police being falsely called out, workplaces and family being targeted etc?