Mumsnet data breach

Another tip- I only ever go into my proton email account in a private browser window so it won’t be linked to my other online activity in any way.

Thanks for this tip.

who the everloving fuck does MNHQs acceptance testing?

who ever it is, get some one new

jeez

Subject Access Request?

of course you can put in a FOI to mumsnet! They can choose to ignore it as a private company.

Google proton mail and get a free proton email address. I have an email account with a fake name and I used that to set up a MN account. I don't think you will be able to keep your previous username. You can skip the step which asks you to enter a recovery email or phone number (as mentioned by PP) but this does mean you will be locked out of your proton email if you forget your login details. It's really quick and easy to do, I'm no tech expert.

I left Mumsnet a while ago over fears about that TRA FOJN mentioned earlier. I lost all my lovely usernames from that time. I wish I knew how to set up a burner email, I had no luck. And I don't want to lose my username again. Any tips?

Me too,

Burner email/regular name change/rinse and repeat

Agree with pps.

Burner email. No real name or info. Lie enthusiastically and frequently on the boards so that no trail of personal info can be created by searching your posts. And if in doubt, delete membership and re join via a new email/name etc.

MN unfortunately are a bit infamous on this and it is necessary to protect yourself if you post here.

It's OK, they're going to inform everyone who's email has been compromised.

Narrator: "they didn't"

........ What the fuck MNHQ?? No really? What the actual fuck? How does that remotely happen?

Yes you should be firing people here. That is hugely terrible development work!

There's a big chance that someone has been using this to gather email addresses for lots of users here. How many were linked and who out there was gathering them?

When did 'hate speech' become an option on the report post link?

Isn't that a tad objective? And inflammatory?

This applies to a very small number of users and we'll be contacting them shortly to let them know. Our DPO has been informed and on his advice we'll report it the ICO if appropriate. Please be assured the issue is now fixed. We will of course be examining how it happened to ensure it never happens again. We're really sorry for any concern caused.

Holy fuck! MNHQ seem very relaxed about doxxing people. If they were an airline, they'd be paying hundreds of thousands in compensation for such an appalling data breach.

I hope they change their tech people - someone needs to be sacked.

Off to completely change my registration. Bleurgh, more email addresses and passwords to remember.

Same here, @FOJN

You don't have to provide a back-up 'rescue' email address or phone number if you don't want to - just skip that step.

I don't use the Google "save password" option either for that account.

Can I just add that it took me about a minute to set a basic (free) proton email. Thank you for that tip.

You don't have to provide a back-up 'rescue' email address or phone number if you don't want to - just skip that step. Pick a fake display name and that's your identity, and all that anyone can ever 'know' about you.

Don't forget to change your password regularly, too. Take as much data out of your MN 'Settings' as possible, unless it's fake.

I already change my username a lot.

I have a proton email address with a fake name for MN. I wish I didn't have to but after a certain TRA tried to demand a user's details from MN so they could pursue legal action against that user I thought it was the safest thing to do.

From what I've read, the problem isn't with you reporting posts, it's with your posts being reported, possibly vexatiously, and the reporter getting your email address. Fun times.

I checked and my most recent report email was from 16 May and only includes my email and full name (which now I think about it is a bit weird??) not the person reported.

Yes I use proton mail only for Mumsnet too. Not a sign of confidence really is it?🤨

#the site's still glitching#

Good idea, it's probably better to let them stand anyway - I think some posts are created by TRAS looking for them to be deleted so they can screenshot for twitter.

Good idea, I think it's better to let them stand

This is awful. I use an email address for MN that I don’t use for anything else. I won’t be reporting any more posts either.

I think the Helen Joyce video has ramped up the vitriol, I've name-changed too. Be wary we could be in for a few bumpy weeks.

Well exactly.

MNHQ/Justine said last night they’d fixed the breach.

Now we’re trying to understand who got robbed, and how bad it is for the individuals who will need to act.

How do we KNOW everyone affected has been contacted?