Mumsnet data breach

[PronounssheRa]

Reposting this from site stuff and chat as here is where a lot of reporting of posts happens

www.mumsnet.com/talk/site_stuff/4564026-change-in-format-of-response-to-report-emails

www.mumsnet.com/talk/_chat/4564131-another-mumsnet-data-breach

We had a temporary glitch with 'Report this post' for a short time today which meant the email of the person reported was included in the report and in a few cases in responses to those reports. This applies to a very small number of users and we'll be contacting them shortly to let them know. Our DPO has been informed and on his advice we'll report it the ICO if appropriate. Please be assured the issue is now fixed. We will of course be examining how it happened to ensure it never happens again. We're really sorry for any concern caused.

I have a proton email address with a fake name for MN. I wish I didn't have to but after a certain TRA tried to demand a user's details from MN so they could pursue legal action against that user I thought it was the safest thing to do.

Can I just add that it took me about a minute to set a basic (free) proton email. Thank you for that tip.

You don't have to provide a back-up 'rescue' email address or phone number if you don't want to - just skip that step. Pick a fake display name and that's your identity, and all that anyone can ever 'know' about you.

Don't forget to change your password regularly, too. Take as much data out of your MN 'Settings' as possible, unless it's fake.

I already change my username a lot.

You don't have to provide a back-up 'rescue' email address or phone number if you don't want to - just skip that step.

I don't use the Google "save password" option either for that account.

Same here, @FOJN

This applies to a very small number of users and we'll be contacting them shortly to let them know. Our DPO has been informed and on his advice we'll report it the ICO if appropriate. Please be assured the issue is now fixed. We will of course be examining how it happened to ensure it never happens again. We're really sorry for any concern caused.

Holy fuck! MNHQ seem very relaxed about doxxing people. If they were an airline, they'd be paying hundreds of thousands in compensation for such an appalling data breach.

I hope they change their tech people - someone needs to be sacked.

Off to completely change my registration. Bleurgh, more email addresses and passwords to remember.

When did 'hate speech' become an option on the report post link?

Isn't that a tad objective? And inflammatory?

........ What the fuck MNHQ?? No really? What the actual fuck? How does that remotely happen?

Yes you should be firing people here. That is hugely terrible development work!

There's a big chance that someone has been using this to gather email addresses for lots of users here. How many were linked and who out there was gathering them?

It's OK, they're going to inform everyone who's email has been compromised.

Narrator: "they didn't"

Agree with pps.

Burner email. No real name or info. Lie enthusiastically and frequently on the boards so that no trail of personal info can be created by searching your posts. And if in doubt, delete membership and re join via a new email/name etc.

MN unfortunately are a bit infamous on this and it is necessary to protect yourself if you post here.

Me too,

Burner email/regular name change/rinse and repeat

I left Mumsnet a while ago over fears about that TRA FOJN mentioned earlier. I lost all my lovely usernames from that time. I wish I knew how to set up a burner email, I had no luck. And I don't want to lose my username again. Any tips?

Google proton mail and get a free proton email address. I have an email account with a fake name and I used that to set up a MN account. I don't think you will be able to keep your previous username. You can skip the step which asks you to enter a recovery email or phone number (as mentioned by PP) but this does mean you will be locked out of your proton email if you forget your login details. It's really quick and easy to do, I'm no tech expert.

of course you can put in a FOI to mumsnet! They can choose to ignore it as a private company.

Subject Access Request?

who the everloving fuck does MNHQs acceptance testing?

who ever it is, get some one new

jeez

Thanks for this tip.

Another tip- I only ever go into my proton email account in a private browser window so it won’t be linked to my other online activity in any way.