Active discussions

Meet the Other Phone. Protection built in.

Meet the Other Phone.
Protection built in.

Buy now

Please or to access all these features

Talk
Feminism: Sex and gender discussions

Feminism: chat

Original poster

Mumsnet data breach

67 replies

PronounssheRa · 07/06/2022 07:45

Reposting this from site stuff and chat as here is where a lot of reporting of posts happens

www.mumsnet.com/talk/site_stuff/4564026-change-in-format-of-response-to-report-emails

www.mumsnet.com/talk/_chat/4564131-another-mumsnet-data-breach

We had a temporary glitch with 'Report this post' for a short time today which meant the email of the person reported was included in the report and in a few cases in responses to those reports. This applies to a very small number of users and we'll be contacting them shortly to let them know. Our DPO has been informed and on his advice we'll report it the ICO if appropriate. Please be assured the issue is now fixed. We will of course be examining how it happened to ensure it never happens again. We're really sorry for any concern caused.

OP posts:
MrsOvertonsWindow · 07/06/2022 07:48

This reply has been withdrawn

This message has been withdrawn at the poster's request

Ereshkigalangcleg · 07/06/2022 07:50

I was just coming to share Change in format of response to report emails www.mumsnet.com/Talk/site_stuff/4564026-change-in-format-of-response-to-report-emails

NotBadConsidering · 07/06/2022 07:57

We had a temporary glitch with 'Report this post' for a short time today which meant the email of the person reported was included in the report and in a few cases in responses to those reports

So if a TRA had reported a regular poster on the Helen Joyce thread for example, the TRA may have got the email address of the regular poster in the response they received?😲

MediocreHRPerson · 07/06/2022 07:58

This is why I name change regularly and use a different email address for MN. I love the site - but safe it isn't.

Ereshkigalangcleg · 07/06/2022 08:02

So if a TRA had reported a regular poster on the Helen Joyce thread for example, the TRA may have got the email address of the regular poster in the response they received?

Yes, exactly this.

Original poster
PronounssheRa · 07/06/2022 08:02

So if a TRA had reported a regular poster on the Helen Joyce thread for example, the TRA may have got the email address of the regular poster in the response they received

Yes. Always, always use a burner email that can't be linked to anything else.

Ps I've reported my duplicate thread

OP posts:
BordoisAgain · 07/06/2022 08:10

I saw this last night and was going to post here but the site dropped.

I'm a bit Hmm about how casually this is being treated - given the vast number of reports made its going to a lot more than a few users affected. Let's hope email addresses don't get into the hands of those with malicious intent.

NecessaryScene · 07/06/2022 08:11

given the vast number of reports made its going to a lot more than a few users affected

Depends how long the glitch was in force. If people noticed immediately when it started doing it, and moderators suspended work until it was fixed, could have been very few e-mails.

AmIAJoke · 07/06/2022 08:13

Set up a burner email and regularly name change if you are concerned about leaks.MN has been weak with this for years.

Hoardasurass · 07/06/2022 08:14

Thanks for posting this as I had no idea until I went and double checked my emails and yep have got the posters email address so have just changed all my passwords again

ErrolTheDragon · 07/06/2022 08:14

Presumably MNHQ knows both who was reported and who did the reporting.

So it would be extremely unwise of anyone who accidentally obtained another persons email to make use of it in any way.

MissLucyEyelesbarrow · 07/06/2022 08:16

Jeez - again? They really do not take data protection seriously.

This is why I will not pay for premium, while it requires sharing my details with MN.

Ereshkigalangcleg · 07/06/2022 08:16

Will they definitely know everyone who is affected? I guess all the reports within a certain timeframe?

picklemewalnuts · 07/06/2022 08:18

That's so serious, given the nature of some of the 'watchers'.

MissLucyEyelesbarrow · 07/06/2022 08:20

ErrolTheDragon · 07/06/2022 08:14

Presumably MNHQ knows both who was reported and who did the reporting.

So it would be extremely unwise of anyone who accidentally obtained another persons email to make use of it in any way.

Not really. A private individual is not subject to GDPR (despite 1000 MN threads that believe otherwise). And, if they use the email address to dox, how would anyone prove how they obtained the information? Plus, if they are a troll/TRA, they will just use a VPN and they are highly unlikely to have signed up to MN with their real details, so how would anyone trace them?

drinkingwineoutofamug · 07/06/2022 08:20

I reported the faggot thread yesterday.
Just looked properly at the email off Mumsnet.
Yes my full name and email address with the name and email address of the troll.
Happy days.
Off to change my email etc and hope I don't get any comeback from this

Original poster
PronounssheRa · 07/06/2022 08:21

picklemewalnuts · 07/06/2022 08:18

That's so serious, given the nature of some of the 'watchers'.

Yep, I can imagine what some of our watchers would do with email addresses especially if that email address reveals genuine details about someone.

OP posts:
BordoisAgain · 07/06/2022 08:23

NecessaryScene · 07/06/2022 08:11

given the vast number of reports made its going to a lot more than a few users affected

Depends how long the glitch was in force. If people noticed immediately when it started doing it, and moderators suspended work until it was fixed, could have been very few e-mails.

Someone on the thread in chat is saying they have a report acknowledgment from Saturday morning showing an email address.

Ereshkigalangcleg · 07/06/2022 08:24

I reported the faggot thread yesterday.
Just looked properly at the email off Mumsnet.
Yes my full name and email address with the name and email address of the troll.
Happy days.
Off to change my email etc and hope I don't get any comeback from this

FWIW Mumsnet have said it's only a one way thing, ie your email wouldn't go to the person reported.

TeenPlusCat · 07/06/2022 08:26

What worries me a bit about threads like this, especially on this board, is it is positively encouraging people to go back and check their report post emails, which might otherwise have been deleted as part of daily clean up..

Ereshkigalangcleg · 07/06/2022 08:27

I think people have a right to know this happened.

drinkingwineoutofamug · 07/06/2022 08:29

Ereshkigalangcleg · 07/06/2022 08:24

I reported the faggot thread yesterday.
Just looked properly at the email off Mumsnet.
Yes my full name and email address with the name and email address of the troll.
Happy days.
Off to change my email etc and hope I don't get any comeback from this

FWIW Mumsnet have said it's only a one way thing, ie your email wouldn't go to the person reported.

Hopefully then it will be ok?
But I can get in touch with the troll and swap cake recipes ?

Ereshkigalangcleg · 07/06/2022 08:30

I guess so!

nicerucksack · 07/06/2022 08:32

I've just checked my emails and my "thanks for reporting" messages from MN include my email and that of the troll (I don't think it was a FWR troll, the posts were in AIBU).

Am I right in thinking this means I have the troll's email but they don't have mine?

And wtf @mnhq We all know such data breaches from you are far from a one-off. My reasons for continuing to visit MN are vanishing by the day.

Thanks for reposting this, OP. You're right that it might have remained hidden in site stuff.

Ereshkigalangcleg · 07/06/2022 08:36

Am I right in thinking this means I have the troll's email but they don't have mine?

I think so. They didn't used to tell you who reported you when you got a strike etc, so that makes sense.