Active discussions

Meet the Other Phone. Only the apps you allow.

Meet the Other Phone.
Only the apps you allow.

Buy now

Please or to access all these features

Talk
Site stuff

Join our Innovation Panel to try new features early and help make Mumsnet better.

See all MNHQ comments on this thread

MNHQ

Update on the recent sharing of three users' IP addresses

103 replies

KateMumsnet · 19/04/2018 17:57

Hi everyone

As many of you already know, some screenshots of Mumsnet posts were recently uploaded to Twitter by a former Mumsnet intern - here’s a link to a a previous thread discussing this.

Three of the screenshots showed an Admin’s view of the site, and therefore contained the IP addresses of the posters concerned.

Understandably, there are lots of questions about this, and we thought it best to address them in one stab over here.

Please do post any queries here, or [email protected] if you’ve any concerns or have further questions.

Thanks
MNHQ

OP posts:
misscockerspaniel · 19/04/2018 18:08

Thanks Wine

Ihavenofuckstogive · 19/04/2018 18:09

Thanks MNHQ.

Bumblefuddle · 19/04/2018 18:11

This reply has been deleted

Message withdrawn at poster's request.

Bumblefuddle · 19/04/2018 18:11

This reply has been deleted

Message withdrawn at poster's request.

HopScotchy · 19/04/2018 18:12

The 'maximum' data isn't a complete list of information users are able to supply optionally? There are also fields to complete your kids names and DOBs. Also, the delete account link in my Mumsnet seems to be broken and just takes me to the homepage.

Update on the recent sharing of three users' IP addresses
Update on the recent sharing of three users' IP addresses
NauticalDisaster · 19/04/2018 18:14

What steps have been taken to determine what other data may have been stolen? Has EH been compelled to hand over electronic devices to prove she has no further data?

BitOfFun · 19/04/2018 18:14

Looks good to me, and as much as you could reasonably do Gin

OlennasWimple · 19/04/2018 18:16

Thanks for putting up this info, MNHQ, it's very helpful to have a summary in one place.

Can I just check: does this mean that you believe (because you explicitly asked and were assured that this is the case) that these were the only screen shots that your former intern took of the internal workings of the MN platform? Literally these one or two screenshots were all that she took and sent to herself outside the MN IT system?

MipMipMip · 19/04/2018 18:17

I won a mug from here so you had my address linked to my user name. Was that deleted immediately after postage? If not, why not and how was it stored?

Hygge · 19/04/2018 18:18

Is there a way to delete every post I've ever written, under every user name I've ever used, and then have all of my information taken off every single one of your records?

picklemepopcorn · 19/04/2018 18:19

Thank you for listening to requests about having specific threads for questions and information. It's really helpful.

Hygge · 19/04/2018 18:19

MipMipMip that is a good question.

MNHQ you've had my postal address before too?

Could she have stolen and broadcast that sort of information?

Datun · 19/04/2018 18:22

I have a personal question. My email address is identifying. If I get another email address, do I have to deregister and re-register? If so, can I keep the same username?

Or can I just tell you my new email address and swap them over on your records?

ItsAllGoingToBeFine · 19/04/2018 18:27

What steps have been taken to determine what other data may have been stolen

They asked Emma Hmm

KeneftYakimoski · 19/04/2018 18:29

Whilst an IP address on its own can’t identify an individual,

That's flatly untrue. My desktop machine has a unique IP number: I work for an organisation that has a /16, and therefore every machine has a unique and static IP number. It locates the machine to my desk (and until recently, was in the global DNS as "my-real-name.my-employer.tld")

I have a /28 at home, and therefore the desktop machines at home identify as funny-name.my-real-name.some-other-tld.

In both cases (and I am doing stuff about this right now: it's preyed on my mind for years that I need to sort it out, and this is the impetus) this is probably unwise. But I doubt I'm alone in this, that my IP number accurately and precisely locates me.

Juells · 19/04/2018 18:30

Or can I just tell you my new email address and swap them over on your records?

Can you not just change that in the Basic Details section?

EmpressOfJurisfiction · 19/04/2018 18:30

Kate, can your tech team be sure that she didn't insert any malware into your system?

And what's your response to the people who have pointed out tha the data she stole is sensitive when taken in conjunction with the very personal information that people may have posted about?

spontaneousgiventime · 19/04/2018 18:30

@Datun I changed my email address today, you don't need to dereg to swap to a new one. It's really simple tbf.

KeneftYakimoski · 19/04/2018 18:31

As mentioned above, we’re removing them from the general admin view of the site today, so from now on only relevant people at MNHQ will see this data.

One might ask: if they're so innocuous, as you claim, why have you moved so quickly to restrict access to something so harmless?

MNHQ
HebeMumsnet · 19/04/2018 18:32

Hi folks. Thanks for your thanks. And thanks again for your continued patience and understanding under some fairly trying circumstances.

We'll answer any questions we can as soon as we can, but do bear with us if we don't get to you straight away. We're a bit snowed under as you can imagine and there are lots of queries we'll need to go away and check on to give full answers.

So, OleannasWimple it sounds like we can't say that we know with 100% certainty that these were the only screenshots taken but yes, we have spoken to the intern and Justine has said that's her firm belief. Given the intern's apology today, which we published on another thread, it sounds very unlikely to us that there's anything more 'to come'. Obviously we know that we can't give a 100% firm promise on that so we do appreciate that it won't completely allay people's concerns but we do hope that it does go some way to making people feel less worried about that.

ScarletBegonias · 19/04/2018 18:34

Yes, you can change your email address in the settings section online. They'll send you an email at the new address for you to confirm the change.

I did it myself this afternoon - and changed the name Mumsnet addresses me by in emails at the same time.

KeneftYakimoski · 19/04/2018 18:34

we have spoken to the intern and Justine has said that's her firm belief

Dishonest liars sometimes are dishonest, and lie.

I know, that's a shocking revelation.

KeneftYakimoski · 19/04/2018 18:35

And what about the Intern's "friends" with MN, whom she boasted would be carrying on the work of exposing people? Do they exist? If so, who are they, and what has happened to them?

MNHQ
HebeMumsnet · 19/04/2018 18:40

Datun , yy. As previous posters have said, you should just be able to change that in your account. Give us a shout if you run into difficulties or anything.

spontaneousgiventime · 19/04/2018 18:41

HebeMumsnet Sorry, it doesn't allay my fears one little bit. MN have taken the word of a proven liar and thief who's sole aim was to cause maximum damage and harm to this site and its users.

Today I have; changed my password, changed my email address and had the post under a different username deleted as I am terrified I have posted too much personal information and the NN I use now is for the feminist board. No one knows what EH has stolen, and it could include;

Full names
Addresses
Email addresses
Children's names and DOB

She had access to all our user names, that means by going from one username to another she could easily build up quite a comprehensive picture of some posters. Saying you don't think she has taken more data is not good enough. GC women are threatened by TRA every day and EH was/is a TRA sympathiser/activist.