Change in format of response to report emails

[Hobnobswantshernameback]

i reported a thread earlier
I thought the email back looked weird and when I looked at it properly I realised that on the link to the post I reported was a direct link to the email address of the poster that I had reported.
out of curiosity I googled the name
it led me to a person that was instantly identifiable
now I won't be doing anything with that information but MNHQ when did the email format change and how widely are peoples details being accessed?
surely this is a significant issue which I only spotted today due to the email back looking weird

Shocking.

This could have serious real life implications for some people, you do realise that? Maybe try and be a little less "oops silly us" about it.

Is there really not a member of staff on to answer questions people have about this?

How did you become aware of the issue?

Following on from this I've just set up "hide my email" for Mumsnet so my real email address is no longer included. It's included with iCloud so worth checking out if you already pay for the storage. Worth it as there's a risk this could happen on any site.

Sounds a bit like you're only telling people because someone has posted this thread.

Wow, that's really bad. I wonder how many posters were involved.

I've a special email that I only use for MN 😕

Yes I went with protonmail for this purpose

Exactly what I was thinking.

This is bloody appalling. Who is responsible for this at MNHQ?

All posters whose email addresses were emailed to 'reporters' need to be informed.

Good point.

This is quite a serious matter.

I'd say that this is worse than when the intern doxed a load of people.

From the ICO’s website:

If you experience a personal data breach you need to consider whether this poses a risk to people. You need to consider the likelihood and severity of the risk to people’s rights and freedoms, following the breach. When you’ve made this assessment, if it’s likely there will be a risk then you must notify the ICO

Given the risk that board monitors and serial reporters pose to the women who post on FWR, this seems like a case that should be reported to the ICO.

Why isn't this being taken more seriously by mnhq?

Could you please tell us how long this has been going on for @JustineMumsnet

But if someone reported me (they wouldn't as I am sweetness and fucking delight) they will have my email???

Thank goodness I don’t use my usual email address.

@iCorvidae yes and first name if you used it to sign up

Will you be informing everyone whose privacy was breached?

I think it's a legal requirement to do so. I have to say I'm a bit horrified by the casual initial response from MNHQ and the radio silence ever since.

An update on this:

We emailed the affected users overnight offering to delete their posts, a retrospective name change or to change their email address. There are around 20 users affected.

The problem was caused by human error our end - our proper processes weren't followed. It started at 12.45pm yesterday and was fixed as soon as we were alerted (around 7pm).

It applied only to the emails/usernames of users who had posts reported (not to those doing the reporting). (Their details were included at the bottom of replies to the person who reported the post)

We know how the error occurred - we obviously have checks and balances in place to stop this kind of thing happening and in two very clear ways the proper procedures weren't followed in this instance.

We'll be reporting ourselves to the ICO today.

Obviously this is deeply disappointing and I understand that people are unnerved. I can assure you we are taking it very seriously internally to learn from it and make sure nothing like this can happen again.

I'm really sorry this has happened and apologise wholeheartedly to all those who've suffered undue concern as a result.

I highly doubt only 20 users/posts were reported in 7 hours. If anyone reported me yesterday between lunchtime and 7pm please be respectful of the data you received about me.

If you have reported me and have my data I don't care that I've been reported, (I've reported users, although not in that time frame, so we all do it) but could you please let me know as I haven't received any notification from mumsnet that I'm affected.

I'd like to know if it was done 'accidentally on purpose' iykwim. I'm cynical after the Intern Incident. That was all supposed to be an accident as well, despite her activity on Twitter.

Anyone who is on the FWR boards knows that GC women regularly receive rape/death/violence threats and have had pictures of their homes/DC/addresses posted on the internet. I no longer use any social media except MN and after the intern incident plus some (non non MN related) threats in RL, had tightened up my security. It's really really worrying that this has happened.

I agree there should be a sticky alerting posters that this happened even if they are not one of the posters personally affected. It's information that we all should know, especially FWR posters. (I don't want this to turn into a fighty thread about the FWR boards as I think everyone, whatever their views on feminist issues, would agree no one should be placed at risk for their views).

@JustineMumsnet is there any plans or obligations to let all site users know about this?