Active discussions

Meet the Other Phone. Child-safe in minutes.

Meet the Other Phone.
Child-safe in minutes.

Buy now

Please or to access all these features

Talk
Site stuff

Join our Innovation Panel to try new features early and help make Mumsnet better.

See all MNHQ comments on this thread

Original poster

I've just logged into someone else's account, using my own details?

335 replies

WorraLiberty · 06/02/2019 22:45

I have no idea how this happened?

I logged in using my usual email address and password, went to TIO and realised I hadn't been on any of the threads in question and the account settings were completely different Confused

Then I realised it was someone else's account? Needless to say I logged straight out. I entered the same details again and now I'm back as me.

For the record, I'm not a name changer and have never heard of the person who I logged in as (see attached pic).

I've just logged into someone else's account, using my own details?
OP posts:
MNHQ
JustineMumsnet · 07/02/2019 09:13

@ShirleyPhallus

Hopefully that will sort the problem

Justine you need to do a bit more than just hope the problem has been sorted. Y’know, testing and diagnostics and stuff.

Yes indeed.
The site was down for a minute because we reversed the service I talked about.

Original poster
WorraLiberty · 07/02/2019 09:13

I would recommend everyone deletes their inboxes, if they haven't already done so.

OP posts:
HerRoyalFattyness · 07/02/2019 09:14

I haven't been here since October, and as far as i can see no one has posted as me, but of course that doesn't mean I'm safe and haven't had a stranger in my account, which has some very personal PMs, both from me and other posters to me. .

HerRoyalFattyness · 07/02/2019 09:15

worra Ive literally just done that.

sackrifice · 07/02/2019 09:15

You need to contact everyone whose private and personal details have been compromised.

Not just wave it off.

This is a breach of personal data.

C8H10N4O2 · 07/02/2019 09:15

I am a software tester and this sort of thing is the stuff of nightmares

You may need to supply a job description as apparently MNHQ don't understand the concept.

@MNHQ

Why was login not suspended for the duration and why have you not forcibly logged everyone out when reversing the change? Ideally you should enforce a password cahnge as well in this situation.

EspressoButler · 07/02/2019 09:15

This reply has been deleted

Message withdrawn at poster's request.

MNHQ
JustineMumsnet · 07/02/2019 09:15

@okokokok

Are you going to alert the users who have had their privacy compromised?

Yes we will.

MNHQ
JustineMumsnet · 07/02/2019 09:15

@sackrifice

You need to contact everyone whose private and personal details have been compromised.

Not just wave it off.

This is a breach of personal data.

There's no way we're waving it off.

C8H10N4O2 · 07/02/2019 09:16

You need to contact everyone whose private and personal details have been compromised.

That is everyone. Everyone should be informed and reset their account details.

IceRebel · 07/02/2019 09:16

For those who are more clued up on data breeches and reporting this issue. Does this count as one data breech, or due to how many accounts were involved would it be multiple breeches?

MNHQ
JustineMumsnet · 07/02/2019 09:16

@EspressoButler

hopefully that will sort the problem

How do we know? MN clearly doesn’t. St the moment I can only appear to log in as me. But I thought the same before my Brew this morning.

hopefully doesn’t fill me with much hope.

We can't know for 100% that this was the cause of the problem but it is a very likely explanation.

MNHQ
JustineMumsnet · 07/02/2019 09:17

@C8H10N4O2

You need to contact everyone whose private and personal details have been compromised.

That is everyone. Everyone should be informed and reset their account details.

Yes

LangCleg · 07/02/2019 09:17

Placemarking.

ShirleyPhallus · 07/02/2019 09:17

Really bizarre how often stuff like this happens on here. Sometimes it’s like it’s being run in the back of a village hall by about 3 ladies on their tea break rather than being actually a very large corporate organisation.

mirren3 · 07/02/2019 09:18

I'm trying to change my password, clicked on the link in the email you sent, it just takes me to the home page.
Obviously I'd really like to change my password, can you help with this problem too?

WhatTheNightBrings · 07/02/2019 09:19

@JustineMumsnet Can someone please email me with a list of all log ins and activity on my account since Tuesday at noon.
Please let me know if you have an official SAR format you need me to fill out.

MNHQ
JustineMumsnet · 07/02/2019 09:19

@C8H10N4O2

*@MNHQ*

Why was login not suspended for the duration and why have you not forcibly logged everyone out when reversing the change? Ideally you should enforce a password cahnge as well in this situation.

We have forced logged everyone out. And it's a fair question about suspending login late last night. It wasn't clear at the time that the problem was widespread but I agree that's no excuse.

BBInGinDrinking · 07/02/2019 09:19

apologies again for any inconvenience

It's not really the inconvenience though, is it, apart from the time we've spent flagging it up?

It's the breach of privacy and breach of data, and for some posters it's actual risk.

This, coupled with the amount of time it has been allowed to continue - potentially Tuesday night to just now on Thursday morning, (and only then because we've been jumping up and down about it), is highly disturbing.

ShirleyPhallus · 07/02/2019 09:20

We have forced logged everyone out

I haven’t been logged out?

IceRebel · 07/02/2019 09:20

We have forced logged everyone out.

I've not been made to log back in Confused

prh47bridge · 07/02/2019 09:21

Justine you need to do a bit more than just hope the problem has been sorted. Y’know, testing and diagnostics and stuff

To be fair, if they haven't got steps to reproduce the issue it isn't possible for them to test that it has been resolved.

SpartacusAutisticusAHF · 07/02/2019 09:22

This reply has been deleted

Message withdrawn at poster's request.

C8H10N4O2 · 07/02/2019 09:23

We have forced logged everyone out

My account has remained logged in for the duration. Firefox 62.0.2 on Mojave. I am posting from the continuous login now.

Nemesia · 07/02/2019 09:23

Me either.

Swipe left for the next trending thread