Active discussions

Meet the Other Phone. Flexible and made to last.

Meet the Other Phone.
Flexible and made to last.

Buy now

Please or to access all these features

Talk

Back to thread
MNHQ

Update on the recent sharing of three users' IP addresses

13 replies

KateMumsnet · 19/04/2018 17:57

Hi everyone

As many of you already know, some screenshots of Mumsnet posts were recently uploaded to Twitter by a former Mumsnet intern - here’s a link to a a previous thread discussing this.

Three of the screenshots showed an Admin’s view of the site, and therefore contained the IP addresses of the posters concerned.

Understandably, there are lots of questions about this, and we thought it best to address them in one stab over here.

Please do post any queries here, or [email protected] if you’ve any concerns or have further questions.

Thanks
MNHQ

Go to post
MNHQ

HebeMumsnet · 19/04/2018 18:32

Hi folks. Thanks for your thanks. And thanks again for your continued patience and understanding under some fairly trying circumstances.

We'll answer any questions we can as soon as we can, but do bear with us if we don't get to you straight away. We're a bit snowed under as you can imagine and there are lots of queries we'll need to go away and check on to give full answers.

So, OleannasWimple it sounds like we can't say that we know with 100% certainty that these were the only screenshots taken but yes, we have spoken to the intern and Justine has said that's her firm belief. Given the intern's apology today, which we published on another thread, it sounds very unlikely to us that there's anything more 'to come'. Obviously we know that we can't give a 100% firm promise on that so we do appreciate that it won't completely allay people's concerns but we do hope that it does go some way to making people feel less worried about that.

MNHQ

HebeMumsnet · 19/04/2018 18:40

Datun , yy. As previous posters have said, you should just be able to change that in your account. Give us a shout if you run into difficulties or anything.

MNHQ

HebeMumsnet · 19/04/2018 19:18

Hello again.

Sorry we can't keep up with this thread in real time. We will get to all your questions when we can.

Just wanted to point out, as perhaps not everyone will have seen it, that we have reported the incident to both the ICO and the police. So some of it is in their hands now, but we didn't want you to think we just put in a quick phone call to the intern and left it at that. That's absolutely not the case.

Yes, it is our belief that this isn't an 'ongoing incident' in any way. However, we definitely aren't leaving it at that and we are continuing to pursue it and do all we can to find out more, improve our own systems and answer questions and give as much information as possible.

While we hope the knowledge that Justine believes there not to be an ongoing problem here will make people feel less uneasy, please be assured we definitely don't see that as a panacea or an end to the issue.

Again, thanks for your patience and do keep any questions or concerns coming.

MNHQ

KateMumsnet · 19/04/2018 19:47

@ChampiontheWonderHamster

If I request all my posts be deleted, under all usernames, can the mods or anyone at MNHQ see them after they’ve been deleted? Or are they gone from all systems?

Mods can see that you posted, Champion, but not what you actually wrote.

MNHQ

JustineMumsnet · 19/04/2018 21:08

@Weezol

The title of this thread is pretty poor. I'm sure the words 'Data Breach' would make a lot more users aware of this.

I'd hate to think MNHQ is being intentionally ambiguous, but given some of the posts from @JustineMumsnet last night and this morning, I can't help wondering.

Here you go

MNHQ

JustineMumsnet · 19/04/2018 21:11

@FrancisCrawford

we hope the knowledge that Justine believes there not to be an ongoing problem here will make people feel less uneasy

Given that Justine has stated in writing that MN do not have any data that falls into the “sensitive personal data” category, which is 100% wrong and shows a total lack of understanding about data protection, that does nothing to make me feel less uneasy.

What people volunteer to post is not classed as Sensitive Personal Data FrancisCrawford. Any sensitive data that we ask for/collect (eg medical info) then we have a legal obligation to make sure we protect it. If people volunteer that info to a public forum that’s a different thing.

MNHQ

JustineMumsnet · 19/04/2018 21:22

@leghoul

In the context of a data breach which could leave users identifiable through email addresses and LinkedIn/ facebook/ whatever, then the data sensitivity of information posted on the forum would surely change in light of the breach? Seeing as it was posted anonymously, not written with names stamped all over it not my field but think this would be logically arguable

It's certainly potentially sensitive info for sure - i was just explaining why I'd said what I said about MN holding what's officially classed as PSI in response to a user who'd suggested best practice around those. We don't according to the legal definition. There is some debate about whether gender counts but the NHS don't class it as such. But I agree it's not really the critical issue here.

MNHQ

JustineMumsnet · 19/04/2018 21:27

@ChampiontheWonderHamster

How do I go about getting all my data held by MN including posts and PMs deleted?

I believe your reading of the DPA (current law) is incorrect.

Just mail [email protected]

MNHQ

LouMumsnet · 19/04/2018 21:33

Evening everyone. Just a heads up that Justine has started a Site Stuff thread here - please do have a read.

MNHQ

KateMumsnet · 19/04/2018 21:34

Hi everyone - Justine's posted a thread with 'data breach' in the title over here now.

Sorry for the inconvenience but please go over to that thread to continue.

MNHQ

JustineMumsnet · 19/04/2018 21:37

@merrymouse

I would really like to know why MN think EH felt it necessary to take screenshots of posts from her work computer when the posts could already be seen on the MN website by anybody with an internet connection.

Ok so you're asking what we think so... at the risk of being accused of being blase about it... I think she actually just didn't think. Obviously I can't prove that but it's my impression from working with her and from her behaviours and correspondence since.

But clearly others have different opinions.

MNHQ

KateMumsnet · 21/04/2018 10:22

@ChampiontheWonderHamster

If I request all my posts be deleted, under all usernames, can the mods or anyone at MNHQ see them after they’ve been deleted? Or are they gone from all systems?

Apologies, @ChampiontheWonderHamster

  • I answered this incorrectly upthread. Yes, anyone with access to the administration tool can see the original post.
MNHQ

KateMumsnet · 21/04/2018 10:27

@Yarnswift

I’d like to ask how you can be sure that no name identifiable info was stolen? MNHQ had my home address and name from a competition and it’s critical that doesn’t get into the public domain.

@Yarnswift Competition entrant’s data is deleted after three months. Competition winners data is stored for longer for accounting reasons (vouchers and other prizes have a monetary value). We’re reviewing this policy, though - and if you could drop us a line via [email protected] we’ll make sure yours has been deleted.

Watch this thread for updates

Tap "Watch" to get all the latest updates

End of posts

There are no more MNHQ posts on this thread

Back to thread