Mumsnet Data Breach - FAQs

[JustineMumsnet]

As lots of the same queries re the data breach are reappearing we've made an FAQs page Do let us know if there's anything important we've left off. We'll keep updating this document as soon as we have further any further info. Thanks.

EDITED BY MNHQ AT 17.15 ON FEBRUARY 8: We're now as sure as we can be that the total number of accounts affected by this breach was 46. We will be contacting these users within the next hour or so.

Xpost!

@NellMumsnet

I'm going to be rude and emphasise this, as it's being ignored, despite asking several times via the threads and the report system.

WHERE ARE WE AT WITH SENDING EMAIL TO ALL USERS? HOW MANY ARE STILL TO GO?

The timings mentioned are extremely confusing. Can MNHQ explain why they ‘didn’t know’ that sending out a million emails would not happen simultaneously?

Hold on

When two people log in at the same time, there is a very small delay between them (milliseconds), and the first person to login (user A) was sometimes given the account of the second user (user B).
User B logged into their own account as normal; they were not given user A’s account.

How can user A get given user B's information, when user B hasn't logged in yet? Even milliseconds count surely?

How can user A get given user B's information, when user B hasn't logged in yet? Even milliseconds count surely?

Good question, it would be slightly more understandable if it was indeed just the 2 accounts switching upon log in, but an account accessing a different one which hasn't even logged in yet is pretty damn worrying.

I've not had any emails about this that are genuine.

I have however, had one sent to an email account I do not use for MN (and never have) about this issues which ive deleted as spam.

I understand this has been reported in the news and I suggest people check the sender information regarding any emails about this as there are spam/phishing emails being sent out about it.

Thanks for the update @NellMumsnet .

I don't understand the obsession over getting an email?
I haven't had one either ,but HQ have said many times now why they are taking so long & it's understandable imo.

I haven't seen any of the 46 posters who are directly involved being rude or sarcastic but others who aren't involved can't wait for the latest update so that they can pull it apart like they have every single other update they've demanded .

I mentioned the email because the only one I've had has clearly not come from MN and is spam/a phishing attempt.

I am awaiting my email because MN said they have sent it.
If your post went missing, would you not chase it up.
If your wages didn't appear as expected, would you just shrug it off.

MN have my contact details and have apparently used them, but not - seemingly - to contact me. Of course I want to know what's going on.

Plus, when someone asks a reasonable question, it's perfectly reasonable to expect a response.

Exactly Whatthenightbrings.

Can’t believe a small number of posters are still whining that some of us have the audacity to be pissed off and actually quite incredulous at the incompetence that’s gone on here.

I repeat: MN are not our cosy mates along the road running some little home spun business from the kitchen table. It’s big business and we have a right to expect better.

It's clear that sending a million emails takes time, I also don't understand why people keep saying they haven't had one, it's days out of date now anyway, you can see what it said on the threads, why the need to receive the email.

If I know I'm part of a million strong bulk email that is now largely irrelevant then, no, I'm not bothered if I don't get it.

Obviously the 46 or however many are the important ones to contact immediately, the assurance needed imo is that MNHQ are certain that those people have received their messages by whatever method.

I'm no expert but today's explanation fits better with the data being momentarily shifted down a line, it didn't make sense to me that that could end up with account switching.

It wasn't you @Becca19962014 ,you posted whilst I was typing sorry

at whining,pot kettle ...

Whatthe it's not wages though ,it's a generic email and they are taking a while because of how many users there are.

Of course it's reasonable to want to know what's going on & HQ have informed us .
And there have been responses,many of them .

Hello, apologies to those who have not yet received the general email telling users about the breach.
They are going out in batches still (one issue is that if we send them too fast, there's a possibility they’ll be viewed by some recipient servers as an attack or spam).
We will be updating the information going out in the general email -- in line with the FAQs page.
We have identified the affected users and already contacted them directly.

No whining here Watcher. Just very unimpressed that a business that rakes in the revenue that MN does has such a lax attitude towards data protection. The incidents themselves are serious enough, but the attitude from MNHQ in the immediate aftermath is shocking- they just seem to want to laugh it off with a few jokes about needing a gin. If you don’t have any problem with big businesses making shed loads of money and treating the users who create that business so shoddily, then that’s your lookout. But don’t expect the rest of us to treat it all like a party game

@MNHQ
The bit that confuses me about the bulk email message is that while that one hasn't arrived, I have received a couple of other messages (bulk, but probably on a smaller scale) from you.

It doesn't matter that I haven't received it, because I've seen the threads, but for those who spend less time on MN deserve to know.

Fair enough Cba ,the only reason I mentioned it is because you did & I don't know how you got "whining" from my post tbf ,it make me chuckle though !

I also don't know how you've come the conclusion I think it's a "party game" either ?

MN does has such a lax attitude towards data protection. The incidents themselves are serious enough, but the attitude from MNHQ in the immediate aftermath is shocking- they just seem to want to laugh it off with a few jokes about needing a gin. If you don’t have any problem with big businesses making shed loads of money and treating the users who create that business so shoddily, then that’s your lookout. But don’t expect the rest of us to treat it all like a party game

I have seen no laughing it off ,no shoddy treatment nor have seen jokes .
What I have seen though is rudeness and personal attacks & not from HQ .

It's a mistake ,could possibly be called a bad one at that but things like this happen & they are trying to fix it ,they've told us this many, many times .

In the grand scheme of things ,I just can't get myself too worked up about it all.

(Post edited by MNHQ)

@NellMumsnet - Are MN not looking at thread reports just now? I'm awaiting a response.

And also can you address my query posted at 09.44am

@LilyMumsnet

So I cannot login on the talk app on iPhone on the above email account. Will not work using facebook. Since new new password will now work. Originally resetting password did not work.

I can login using facebook on the iPhone using safari.

I can login using the ‘new’ password on safari on macbook pro on safari

Cannot login using chrome using email and password

Can login using chrome using Facebook on macbook

Cannot login using email and password on Chrome on macbook

Hope that helps.

Can you explain why you ever thought sending one million emails would happen simultaneously? Tbh the information given out in the aftermath is almost as worrying as the incident itself. It suggests a lack of understanding of systems and processes, which feeds into the overall lack of confidence in MN as a forum.

Theweathermansaid are you saying that your current user name isn't one you've name changed to, or has ever been associated with your account? If so what's your usual username?

If I’ve receives an email does that mean my account has been breached? Or is it just a general email?

@Holidayshopping, if you got an email with the information on the FAQ then it's generic. The emails to those who were a part of the breach were different, and mention that the account was breached.

@Theweathermansaid only 2 other posts with that name back last summer?
One on camping with a 3month old ...the other about norovirus