Active discussions

Meet the Other Phone. Only the apps you allow.

Meet the Other Phone.
Only the apps you allow.

Buy now

Please or to access all these features

Talk

Back to thread
Original poster

Change in format of response to report emails

6 replies

Hobnobswantshernameback · 06/06/2022 20:23

i reported a thread earlier
I thought the email back looked weird and when I looked at it properly I realised that on the link to the post I reported was a direct link to the email address of the poster that I had reported.
out of curiosity I googled the name
it led me to a person that was instantly identifiable
now I won't be doing anything with that information but MNHQ when did the email format change and how widely are peoples details being accessed?
surely this is a significant issue which I only spotted today due to the email back looking weird

Go to post
MNHQ

JustineMumsnet · 06/06/2022 21:22

We had a temporary glitch with 'Report this post' for a short time today which meant the email of the person reported was included in the report and in a few cases in responses to those reports. This applies to a very small number of users and we'll be contacting them shortly to let them know. Our DPO has been informed and on his advice we'll report it the ICO if appropriate. Please be assured the issue is now fixed. We will of course be examining how it happened to ensure it never happens again. We're really sorry for any concern caused.

MNHQ

JustineMumsnet · 06/06/2022 21:38

GrainOfSalt · 06/06/2022 21:34

I've had the same, email for the person I reported. very much hope the person I reported did not get my email address, i really need to know of that's the case. I'm going to change my name now and I liked this name

No it's only the person reported who's affected. Sorry for the concern.

MNHQ

JustineMumsnet · 07/06/2022 10:22

JustineMumsnet · 06/06/2022 21:22

We had a temporary glitch with 'Report this post' for a short time today which meant the email of the person reported was included in the report and in a few cases in responses to those reports. This applies to a very small number of users and we'll be contacting them shortly to let them know. Our DPO has been informed and on his advice we'll report it the ICO if appropriate. Please be assured the issue is now fixed. We will of course be examining how it happened to ensure it never happens again. We're really sorry for any concern caused.

An update on this:

We emailed the affected users overnight offering to delete their posts, a retrospective name change or to change their email address. There are around 20 users affected.

The problem was caused by human error our end - our proper processes weren't followed. It started at 12.45pm yesterday and was fixed as soon as we were alerted (around 7pm).

It applied only to the emails/usernames of users who had posts reported (not to those doing the reporting). (Their details were included at the bottom of replies to the person who reported the post)

We know how the error occurred - we obviously have checks and balances in place to stop this kind of thing happening and in two very clear ways the proper procedures weren't followed in this instance.

We'll be reporting ourselves to the ICO today.

Obviously this is deeply disappointing and I understand that people are unnerved. I can assure you we are taking it very seriously internally to learn from it and make sure nothing like this can happen again.

I'm really sorry this has happened and apologise wholeheartedly to all those who've suffered undue concern as a result.

MNHQ

JustineMumsnet · 07/06/2022 11:38

TurnstileSpinStyle · 07/06/2022 11:14

I'd like to know if it was done 'accidentally on purpose' iykwim. I'm cynical after the Intern Incident. That was all supposed to be an accident as well, despite her activity on Twitter.

No it wasn't an intentional error

MNHQ

JustineMumsnet · 07/06/2022 11:45

WeBuiltCisCityOnSexistRoles · 07/06/2022 11:32

Anyone who is on the FWR boards knows that GC women regularly receive rape/death/violence threats and have had pictures of their homes/DC/addresses posted on the internet. I no longer use any social media except MN and after the intern incident plus some (non non MN related) threats in RL, had tightened up my security. It's really really worrying that this has happened.

I agree there should be a sticky alerting posters that this happened even if they are not one of the posters personally affected. It's information that we all should know, especially FWR posters. (I don't want this to turn into a fighty thread about the FWR boards as I think everyone, whatever their views on feminist issues, would agree no one should be placed at risk for their views).

@JustineMumsnet is there any plans or obligations to let all site users know about this?

Given that we know exactly how and why this happened, who was affected and are clear that it wasn't malicious it would be disproportionate to alarm all users. Our priority is to make sure the 20 or so users who's emails and usernames were breached are aware of that (which we have done) and to action any changes to their accounts that they deem necessary (which we are doing).

MNHQ

JustineMumsnet · 07/06/2022 12:23

kittensinthekitchen · 07/06/2022 12:02

@JustineMumsnet

I reported a thread at 6.04pm on Sunday 5th June, and received a response at 21.57 that same evening.

In that response email, I can clearly see the email address of the OP of the thread I reported.

Can you clarify if there are any circumstances under which this should happen? Especially considering it was outwith the time period you've already mentioned.

Thanks

Hi, we've checked this response and the only email included is yours, because you reported the post.

Watch this thread for updates

Tap "Watch" to get all the latest updates

End of posts

There are no more MNHQ posts on this thread

Back to thread