Mumsnet data breach: what has happened and what to know if you’re affected
.jpeg)
The parenting site, Mumsnet has suffered a data protection breach after a software upgrade allowed users to see other people’s information.
They reported themselves to the UK data protection agency and have started sending out emails to its approximately one million members.
The site is aimed at parents and families, but also has members who are suffering abuse or have a range of personal problems, including domestic violence, loneliness and other potentially sensitive matters.
The bug allowed users to see other people’s information if the users logged on at the same time, Mumsnet said.
The Information Commissioner’s Office said it had received the report from Mumsnet and would be looking into the incident.
What could and could not be seen?
Those affected would have been able to see information including email addresses, account details, posting history and personal messages.
What should I do?
Mumsnet says there’s no need for users to do anything except look out for an email from them.
“We are currently working to positively identify any users whose accounts were wrongfully accessed by running software to interrogate the server logs in depth. We will inform anyone affected directly with more information as soon as we identify them,” the company said.
They are sending emails to all users – approximately one million members – and hope to have completed that by the end of Friday 8 February.
Mumsnet said: “We’re really sorry that our mistake has caused anxiety and we do understand why some MNers will be really worried by this.
“There is no evidence that anyone whose account was switched has done anything malicious, but of course we cannot be sure until we have tracked down and investigate every incidence and every log and contacted the affected posters – we are working very hard to close this down as quickly as possible.”
Even if you have opted out of receiving Mumsnet emails this one about data security will override your opt out.
How is Mumsnet fixing the problem?
By Saturday, Mumsnet had confirmed 46 users were affected by the breach.
“We are currently working to positively identify any users whose accounts were wrongfully accessed by running software to interrogate the server logs in depth. We will inform anyone affected directly with more information as soon as we identify them.”
The company says a software upgrade on 5 February contained the bug, and on Thursday they reversed the changes so that it is no longer in the system.
They have also forced every member to log out of the site to ensure the Thursday update kicks in.
source inews
Industry: Cyber Security News
Latest Jobs
-
- Cyber Security Professional Services Lead | London | Immediate
- London
- N/A
-
Cyber Security Professional Services Lead London / Hybrid This role leads the delivery function for a cyber security professional services team, with ownership of utilisation, delivery quality, and team performance across multiple client programmes. You will drive billable utilisation, ensure projects are delivered on time and to standard, and manage resource planning across a complex portfolio. Acting as the escalation point for key engagements, you will also lead and develop a high-performing consulting team, maintaining strong client relationships and consistent delivery standards. Key responsibilities: Drive utilisation and delivery performance Ensure quality, on-time delivery across engagements Manage resource planning and capacity Act as escalation point for key programmes Lead and develop the consulting team Background: Currently leading a cyber or technology professional services function Recent track record improving utilisation and delivery outcomes Experience across multi-client, complex programmes Strong senior stakeholder engagement A hands-on leadership role with accountability for delivery, team performance, and commercial outcomes
-
- Cyber Security Sales | Enterprise | New Business | London
- City of London
- Uncapped OTE
-
Enterprise Account Executive | Cyber Security | UK London / UK (hybrid with client engagement) A scaling cyber security firm is hiring an Enterprise Account Executive to drive growth across large UK organisations. This role blends new business with ownership. You will open doors, create demand, and win enterprise accounts, then retain and grow those relationships into long-term, high-value partnerships. Targeting senior stakeholders at CISO, CIO, and board level, you will shape and close complex deals across cyber security, cloud, and transformation programmes. This is a strategic role. Fewer accounts, higher value, longer cycles. You are expected to build pipeline from scratch, with support around you but without reliance on inbound or marketing. A recent and consistent track record of achieving or exceeding sales targets is essential. This role requires someone currently performing at a high level in enterprise sales. UK-based, with remote working and client engagement as needed. Competitive base and uncapped earnings, with scope to build a meaningful enterprise portfolio.
-
- Cyber Security Sales | Financial Services | New Business | London
- England
- Uncapped OTE
-
New Business Lead | Cyber Security | Financial Services | London / UK UK Remote / London client travel A well-backed cyber security and technology firm is looking to hire a senior New Business Lead to drive UK growth, with a particular focus on Financial Services. This is a position for someone who knows how to open doors where others cannot. A role built around identifying opportunity, challenging incumbents, and converting that into long-term client relationships and revenue. You will own new logo acquisition across FS, working closely with leadership to shape go-to-market strategy and position across cyber security, cloud, and modernisation offerings. Full ownership of the sales lifecycle. Pipeline creation, deal strategy, negotiation, and close. The expectation is simple. Build momentum, win key accounts, and scale a function around you as revenue grows. Strong experience selling into Financial Services environments is key. Credibility at CISO, CIO, and board level matters. Remote-first, with London and client engagement as required. Competitive base, uncapped earnings, and genuine scope to build something meaningful. The successful sales person MUST have a recent history and current experinece of achieving / overachieving against sales target.