Mumsnet data breach

Yep, always use a burner mail for Mumsnet. proton Mail is a good one.

I've name changed and ditched my previous account and email. The TRAs will have harvested as much as they could and that information will now be being shared in their telegram and discord servers.

It doesn't help that MNHQ don't let a poster know that their post has been reported, a function that is badly needed here.

Thanks Mumsnet.

And I thought I was possibly being over cautious using a burner email address for here and other platforms! Glad I did now.

The whizzy new site on its new platform racks up another success. Lovely to know it's such an improvement on the old one.

Once it's been discovered, transparency and clear information is needed. You can't put the genie back in the bottle, people are obviously going to want to talk about it and the less information they have the more they will want to do so, and the more concerned they will be. As I said, expecting people not to talk about it and want to see their own email reports is unrealistic.

Yes, I do understand that. I just don't think calling it 'casual' is fair.

Surely the first priority is notifying the actual people effected, understanding the scope etc, not to broadcast details across the whole of MN?

A thread like this on this board is positively asking for monitors to check their report post emails to see what data they can glean? Especially as they often don't otherwise use MN?

I'm not saying this isn't serious, far from it. But if a Bank has a giant hole in it, you fix the hole first before going out of your way to advertise the hole to all the criminals in the area. (not a great analogy)

What I would like is more of an indication that they are taking these breaches seriously. This isn't the first time something like this has happened. One single response, hidden in the middle of a thread started by a poster, is not enough.

People were obviously going to find out about it, though, weren't they. They have asked questions which haven't been answered about the time period in question.

Obviously people have concerns, particularly due to the reporting levels on this board, and some are not happy with how other data protection issues were dealt with in the past. I don't think the "let's hope no one notices this serious data breach" approach is a particularly good one, personally.

As ever with MNHQ data breaches, it doesn’t help to be left hanging not knowing whether one has been personally affected or not - and by precisely what and how.

Really poor.

@drinkingwineoutofamug yes it did.

I saw a similar comment on another thread.

What response do you expect from MN?

They are notifying the people whose data they have breached.
They have rectified the fault.
They have made their data protection person aware and will notify the relevant office as needed.

Advertising it far and wide surely just makes it more likely that breeched data will be collected and used?

Isn't it it better to take the steady steps to minimise harm, and only then make more general announcements?
Do you want Justine to appear on BBC News at 10 wearing sackcloth and ashes?

.

@nicerucksack did your email of thanks for the report come with a 'how did we do' option?

Thanks @Ereshkigalangcleg I've deleted it but this is very worrying. Somewhat casual response by MN to this, I must say.

I use a burner email for this reason. The only problem is I quickly forget my login details so never see any emails sent there...

Oh for fucks sake. When did this problem start please?

Am I right in thinking this means I have the troll's email but they don't have mine?

I think so. They didn't used to tell you who reported you when you got a strike etc, so that makes sense.

I've just checked my emails and my "thanks for reporting" messages from MN include my email and that of the troll (I don't think it was a FWR troll, the posts were in AIBU).

Am I right in thinking this means I have the troll's email but they don't have mine?

And wtf @mnhq We all know such data breaches from you are far from a one-off. My reasons for continuing to visit MN are vanishing by the day.

Thanks for reposting this, OP. You're right that it might have remained hidden in site stuff.

I guess so!

Hopefully then it will be ok?
But I can get in touch with the troll and swap cake recipes ?

I think people have a right to know this happened.

What worries me a bit about threads like this, especially on this board, is it is positively encouraging people to go back and check their report post emails, which might otherwise have been deleted as part of daily clean up..

I reported the faggot thread yesterday.
Just looked properly at the email off Mumsnet.
Yes my full name and email address with the name and email address of the troll.
Happy days.
Off to change my email etc and hope I don't get any comeback from this

FWIW Mumsnet have said it's only a one way thing, ie your email wouldn't go to the person reported.

Someone on the thread in chat is saying they have a report acknowledgment from Saturday morning showing an email address.