Change in format of response to report emails

[Hobnobswantshernameback]

i reported a thread earlier
I thought the email back looked weird and when I looked at it properly I realised that on the link to the post I reported was a direct link to the email address of the poster that I had reported.
out of curiosity I googled the name
it led me to a person that was instantly identifiable
now I won't be doing anything with that information but MNHQ when did the email format change and how widely are peoples details being accessed?
surely this is a significant issue which I only spotted today due to the email back looking weird

[PeppaPigIsBacon]

I had this as well - not the instantly identifiable name, thankfully, but certainly the email address of the poster I reported.

Again, I obviously won’t be doing anything with that info but it’s a bit concerning.

[Morred]

That’s quite a serious data breach and needs reporting to the ICO.

[BertieBotts]

Wow.

MN once forwarded my report onto the person I was reporting by mistake 😂 that was not good but this is really poor.

[UrsulaPandress]

Whoa. That’s really bad.

[FancyPuffin]

That is really quite shocking.

[HotPotatoWithMayo]

That is really really bad and hugely concerning

[Trounlet]

Yes I've just checked, the deletion message includes the poster's email address, and also two of my user names and email address. Quite a date breach if people wanted to find out who posters were.

[CuriousCatfish]

Bloody hell. MN is a bit messed up atm.

[LondonQueen]

Quite a serious data breach.

[Yarnasaurus]

JFC. That needs addressing urgently.

[WooNoodle]

? This is concerning

[JustineMumsnet]

We had a temporary glitch with 'Report this post' for a short time today which meant the email of the person reported was included in the report and in a few cases in responses to those reports. This applies to a very small number of users and we'll be contacting them shortly to let them know. Our DPO has been informed and on his advice we'll report it the ICO if appropriate. Please be assured the issue is now fixed. We will of course be examining how it happened to ensure it never happens again. We're really sorry for any concern caused.

[Saucery]

@Trounlet

Yes I've just checked, the deletion message includes the poster's email address, and also two of my user names and email address. Quite a date breach if people wanted to find out who posters were.

Wasn’t there a thread the other day that said the new platform lets people see all usernames? It was a bit vague and it’s gone now, but maybe this is what they were hinting at?

[GrainOfSalt]

I've had the same, email for the person I reported. very much hope the person I reported did not get my email address, i really need to know of that's the case. I'm going to change my name now and I liked this name

[kittensinthekitchen]

@JustineMumsnet

We had a temporary glitch with 'Report this post' for a short time today which meant the email of the person reported was included in the report and in a few cases in responses to those reports. This applies to a very small number of users and we'll be contacting them shortly to let them know. Our DPO has been informed and on his advice we'll report it the ICO if appropriate. Please be assured the issue is now fixed. We will of course be examining how it happened to ensure it never happens again. We're really sorry for any concern caused.

That is absolutely shocking. Serious breach of personal information.

Can you confirm the time period this was happening, and how many users are affected?

[JustineMumsnet]

@GrainOfSalt

I've had the same, email for the person I reported. very much hope the person I reported did not get my email address, i really need to know of that's the case. I'm going to change my name now and I liked this name

No it's only the person reported who's affected. Sorry for the concern.

[WooNoodle]

How will someone know if they have been reported?! This is seriously worrying.

[JuneJubilee]

Yeo, I have the email address of the person I reported. Poster was banned.

seems only the troll is affected

but definitely adds to the feeling that MNHQ don't take our privacy very seriously & with so many mini marples & journalists sniffing around that's worrying.

[DonGray]

So if you want to know the ID of a poster, just report them & then you get their email address...

Security/privacy has always been flaky here but this is something else!!!

[GCAcademic]

Following the incident with the doxxy intern, I have a separate, unidentifiable email address just for MN. It is too risky to post on certain boards on this site otherwise. I really hope that no one has the kind of outcome that some of us feared following the intern’s leaking of users’ data.

[Ffoxx]

How many users were doxxed and when will they be informed, tonight or within the next 24hrs? This is really concerning, how could it happen?! On my own settings page my email address is only partially visible.

[Moosake]

@DonGray

So if you want to know the ID of a poster, just report them & then you get their email address...

Security/privacy has always been flaky here but this is something else!!!

This is my concern. I have no way of knowing if someone just reported me for fun once they found out they'd get my email address.

[PaddingtonBearStareAgain]

This isn't good

[LemonRedwood]

This is a shocking breach of personal data, especially as posts on the feminism boards tend to be maliciously reported a lot of the time - so you've potentially handed personal information to those who would quite happily doxx someone they disagreed with.

[Ffoxx]

I think this needs to be pinned to the main boards to raise awareness. There may be people who will have serious concerns if identifying info has been disclosed, as a pp said particularly from malicious reporting on contentious issues like the trans discussions.