So how much info has Emma Healey had access too?

[PlowerOfScotland]

Do we need to change passwords?

Just thought to add, I don't blame @MNHQ for this. This appears to be a non staff member gone rogue, but seeing IP addresses posted in relation to such a difficult and emotive subject is rather scary.

What've I missed?

?

This is really worrying.

www.mumsnet.com/Talk/womens_rights/3225517-The-MNHQ-Moderation-team

What is it?

See this thread:

www.mumsnet.com/Talk/womens_rights/3225517-The-MNHQ-Moderation-team

There's a separate concern of admins being able to retain screenshots (and what else?) after they leave because it suggests either that they're able to transfer data between work and private devices or that they're working on their private devices.

I imagine MNHQ are glad this has come to light this side of GDPR ...

Cheers for linking other thread. Should have checked feminism, came straight here.

This should be here too.

^^ exactly my concern MrsHathaway

It easy enough to pinch screenshots of thinks from work if you've a mind too.

I think pretty much anyone could, email them to a private device etc.

But you obviously shouldn't! I'd be sacked and sued if I did that.

I'm nit having a pop at MNHQ here, but Emma's references to her friends still at MNHQ and that she's had such an agenda while working at MNHQ I doubt that's all the info she took, or the only thing she planned to use it for.

But you obviously shouldn't! I'd be sacked and sued if I did that.

That and then posting them on Twitter.

Unbelievably stupid.

It easy enough to pinch screenshots of thinks from work if you've a mind too

I think pretty much anyone could, email them to a private device etc

-You could block print screen on the computers

-You could lock the computers to only be able to access Mumsnet / block access to personal email/ social media accounts

• You could require staff to leave mobile devices in a secure location in a different room.

This is all after the fact obviously, but there are fairly simply ways to prevent this sort of basic data theft. I expect Mumsnet kind of assumed that because they are a nice company they have nice employees too, and wouldn't need to take these sort of precautions.

I would have thought she'd taken stuff with her for precisely this purpose as why else would you bother?

Though I think it's likely she didn't realise what was on the earlier screenshot as any one of us could screen shot posts but she's done it whilst in the Mumsnet system, she might not have meant to.

I think she meant to cause a stink on twitter but not actually publish anyone's details. Surely no one would purposefully do this knowing it will point right back at them. Using their own account.

I work for financial services and we don't do all that. Mumsnet is a chat site.

I think pretty much anyone could, email them to a private device etc.

I worked in a place where we weren't allowed bring phones into the office for that very reason.

Gosh, this is rather worrying. I don't blame MNHQ for this either, the blame lies with the ex HQer who "accidently" shared data online.
I hope they do something about it though.

I thought a lot of staff worked from home? It would be impossible to prevent people from taking screenshots then.

Bloody hell. At times like this, I almost yearn for the days before the internet, social media etc. It's quite worrying to think about the new ways individuals can be attacked and harmed.

Silly Emma Healey, this won't look good on her CV.

Should interns have access to confidential information about users?

Did she, and others like her, have access to user's registration details such as email addresses?

Yes.

JustineMumsnet

^Hi everyone.
Emma was an intern in the press office for 6 months until March and for a good portion of that time she did have access to the information in our user accounts pages. This is because part of her role involved occasionally contacting Mumsnetters to pass on media requests etc. In February we streamlined the number of people with access to those accounts beyond the community team hers (and others) access was removed.^