I've just logged into someone else's account, using my own details?

[WorraLiberty]

I have no idea how this happened?

I logged in using my usual email address and password, went to TIO and realised I hadn't been on any of the threads in question and the account settings were completely different

Then I realised it was someone else's account? Needless to say I logged straight out. I entered the same details again and now I'm back as me.

For the record, I'm not a name changer and have never heard of the person who I logged in as (see attached pic).

[paxillin]

This is still happening, @soniamumsnet. The site needs to be suspended while you investigate this!

[BBInGinDrinking]

It's hard to believe that all these hours have passed and it's still happening. No further response from MNHQ.

I have reported my last post. Maybe a shouty capital letter thread needs to be started in AIBU, linking to this one, to spread the word, as most don't look in site stuff? Can anyone do it?

Fingers need to be taken off coffee cups and phones, and pulled out at MNHQ PDQ.

[Lochroy]

Possibly unrelated but for the first time ever yesterday I received spam PMs (which I reported). Make me really nervous the amount of stuff random people are seemingly able to access.

[DecumusScotti]

At the very least suspend attempts to log in, @MNHQ

[IceRebel]

Seriously if there was ever a thread for the Daily Mail to pick up on this is it.

We're looking into the issue and will update you asap.

It's been over 9 hours! 9 hours where personal data, private messages and goodness knows what else have been accessible to other people

[AnchorDownDeepBreath]

From a data point of view, this needs to be reported to the ICO if you haven't already done so and from experience, they'll want to know if you've secured the site or how you are minimising data breaches until it is secure. Are you closer to isolating the problem?

I've reported several times over the past 6 months that I am getting notifications for other peoples accounts, which may or may not be linked to this, but it's concerning nonetheless.

I hope you'll be contacting people whose accounts have been incorrectly accessed so they are aware.

[BBInGinDrinking]

X post

Logged in on android phone via gmail email.

Preview button not working and everything is slower to load also.

We really do not like the loss of password protection for name changes either.

[NeverTwerkNaked]

I agree anchor this is certainly a reportable breach and the fact it has carried on so long after it was first flagged is quite concerning.

[BBInGinDrinking]

I have suddenly stopped getting notifications, and wonder if someone else is getting mine.

[olderthanyouthink]

It'll be expensive, but GDPR means it's already going to cost and arm and a leg so what's another few fingers, @MNHQ take the site down. We'll all survive without it for a little while.

Don't know about anyone else but I'm thinking of changing my info so it's not so damn identifying.

[AnchorDownDeepBreath]

@soniamumsnet I perhaps should have tagged you into my post above...

[JustineMumsnet]

Hi everyone, We put a new service live late on Tuesday and we believe this might be the cause of the problem. We're going to reverse that change now and hopefully that will sort it. Will keep you posted. I'm very sorry about this.

[okokokok]

I have posted on AIBU about this. It is potentially very dangerous for some posters. They could have send any sort of private details via PM, bank details, address, their childrens school etc. I can't believe nothing has been done about it. After the massive security breach last time, I thought MN security was ultra tight!

[Nemesia]

Is the site down now? Just clicked on active conversation and it said the site is unavailable.

[Nemesia]

Apparently not 😏

[BoreOfWhabylon]

Test

[Oswin]

It was down for me too for a minute. Thought it had been shut down.

[JustineMumsnet]

Ok we've made that change now and hopefully that will sort the problem. Obviously please let us know if not. If this was the cause, we clearly need to do some investigation here into our testing regime and of course will report this to the Information Commissioner. Thank you to all who flagged it and apologies again for any inconvenience. I'll keep you posted.

[Drookit]

Place marking

[olderthanyouthink]

Same about the site going down for a minute

[ShirleyPhallus]

Hopefully that will sort the problem

Justine you need to do a bit more than just hope the problem has been sorted. Y’know, testing and diagnostics and stuff.

[okokokok]

Are you going to alert the users who have had their privacy compromised?

[sobeyondthehills]

Why has it taken 11 hours?