Active discussions

Meet the Other Phone. Protection built in.

Meet the Other Phone.
Protection built in.

Buy now

Please or to access all these features

Talk
AIBU?

Share your dilemmas and get honest opinions from other Mumsnetters.

Original poster

to tell you to CHANGE YOUR PASSWORD NOW

466 replies

BoreOfWhabylon · 19/08/2015 00:08

No, no I'm not.

See the stickied thread from Justine re hackers and go to the end. The Troll has just dumped a load of MN usernames and passwords on twitter.

OP posts:
Original poster
BoreOfWhabylon · 19/08/2015 00:41

No was me being incoherent, I think (past my bedtime)

Yes, I searched the list and it had my old pw - I don,t use it for anything else so not worried for myself.

OP posts:
TheFormidableMrsC · 19/08/2015 00:48

I can't believe how many people I recognise on it....not me yet...this is just bloody awful....

happygirl87 · 19/08/2015 00:52

Bumping again

gobbymare · 19/08/2015 00:56

Argh on phone my eyes can't possibly read that full list.

CorporationPop · 19/08/2015 00:58

Yeah, I'm just going to delete my MN account now.

Thanks guys, it was fun while it lasted x

Awholelottanosy · 19/08/2015 00:58

Bloody hell there are thousands of names on that list! I changed my password earlier today, I hope it's the old passwords they are using. Why are they doing this, it's appalling!

TheFormidableMrsC · 19/08/2015 01:03

I have contacted those I am in touch with in RL. He has just posted on Twitter that he got the information from a MN insider (mod he said)...who apparently wishes to remain anonymous...

AlpacaMyBags · 19/08/2015 01:07

This reply has been deleted

Message withdrawn at poster's request.

ghostspirit · 19/08/2015 01:08

:/....dont know what to do...thinking maybe should leave dont know who to trust

TrionicLettuce · 19/08/2015 01:09

I wouldn't put much weight on whatever crap he's posting on Twitter.

A previous username of mine is on that list, with my pre-change password HOWEVER there's a spelling mistake in the username, one which I did quite frequently when typing it in quickly to log in. Tallies up rather nicely with the MNHQ suggestion that he's got this info via a very convincing phishing page and NOT by gaining access to the database.

AlpacaMyBags · 19/08/2015 01:11

This reply has been deleted

Message withdrawn at poster's request.

TrionicLettuce · 19/08/2015 01:12

Alpaca According to MNHQ it wasn't a phishing email, he redirected the 'login' button to a very convincing version of the normal login page:

Our best guess at this stage (and it is just a best guess) is that this has been done via a form of phishing, in which the hacker creates a fake Mumsnet login page to which users are directed when clicking on our login button. The page would have had a different url but otherwise would look just like the usual page. The hacker would have been able to see passwords in plain text when they were typed in.

We take great care to protect the information you give us and not to ask for or store any more information than we need to run the site, but though we can't know how many accounts have been affected, there have been enough breaches for us to ask all Mumsnet users to change their passwords. As a result, you'll no longer be able to log in to Mumsnet with your current password, and will need to create a new one, here.

This will mean that any passwords the hacker has been able to harvest up to this point will be useless. We are looking into what we can do to strengthen our defences against phishing, but in the meantime we need to ask you to be vigilant, and to check the URL of the login page for the foreseeable future. The correct URL is www.mumsnet.com/session/login and it reads rather than at the beginning. We will place a warning on the login page reminding you to do this.

MaryBerrysEyelashes · 19/08/2015 01:12

Oh dear.

AlpacaMyBags · 19/08/2015 01:14

This reply has been deleted

Message withdrawn at poster's request.

CSIJanner · 19/08/2015 01:18

Could someone please PM the link to me so I can check for my user name?

PageStillNotFound404 · 19/08/2015 01:19

I've had a few identities over the years, as I tend to use 'one-shot' email addresses for registering on sites such as this and then promptly forget them and end up having to re-register if I get logged out, so if that DadSec info was pulled from the MN database rather than via phishing I'd expect some or all of my former usernames to be on that list. They're not. The only one is my most recent (prior to this incarnation which is the result of having to re-register again thanks to memory fail) which I've only had for a couple of months.

Bless him, he must be a sad woman-hating limp-dicked no-mark with no friends and no life to have all that time on his hands to waste pulling pathetic stunts like that, mustn't he?

TheFormidableMrsC · 19/08/2015 01:20

CSIJanner...it's upthread...

TrionicLettuce · 19/08/2015 01:20

Honestly Alpaca I'm not sure. I don't know if there's been any issue with the app or if it's purely the desktop site. Probably wise to do a password change just in case and make sure you're not using your MN password for anything else.

BecksTroll · 19/08/2015 01:24

Corporation Deregistering is not an option right now: it comes up as Page not found. I have no idea who is responsible for that but even if there was/is a mass exodus, I happen to believe we have the right to choose whether to delete accounts and reregister at a later date or dereg entirely. Once any site makes that hard to do cough fakefriends cough, then it makes me even more determined to leave. Shan't let the door hit me on the way out..if there is a way out

TheHumourlessHarpy · 19/08/2015 01:32

This reply has been deleted

Message deleted by MNHQ. Here's a link to our Talk Guidelines.

HoneyDragon · 19/08/2015 01:37

Doesn't matter how good your password is if it's phished Wink

TheHumourlessHarpy · 19/08/2015 01:39

This reply has been deleted

Message deleted by MNHQ. Here's a link to our Talk Guidelines.

NewsreaderChic · 19/08/2015 01:39

I'm officially pissed off that I can't dereg and when I try to change my email address even though I get a notice saying it's been changed, the old one is still there.

Honestly I think MN should be shut down until this is sorted out.

enviousllama · 19/08/2015 01:40

This reply has been deleted

Message withdrawn at poster's request.

MyNewAccount · 19/08/2015 01:48

OMG. My old account details are not on there. I'm glad I had used a unique email address just for Mumsnet.

I worry for any posters that use the same password for all their accounts.