Mumsnet data breach: what has happened and what to know if you’re affected
The parenting site, Mumsnet has suffered a data protection breach after a software upgrade allowed users to see other people’s information.
They reported themselves to the UK data protection agency and have started sending out emails to its approximately one million members.
The site is aimed at parents and families, but also has members who are suffering abuse or have a range of personal problems, including domestic violence, loneliness and other potentially sensitive matters.
The bug allowed users to see other people’s information if the users logged on at the same time, Mumsnet said.
The Information Commissioner’s Office said it had received the report from Mumsnet and would be looking into the incident.
What could and could not be seen?
Those affected would have been able to see information including email addresses, account details, posting history and personal messages.
What should I do?
Mumsnet says there’s no need for users to do anything except look out for an email from them.
“We are currently working to positively identify any users whose accounts were wrongfully accessed by running software to interrogate the server logs in depth. We will inform anyone affected directly with more information as soon as we identify them,” the company said.
They are sending emails to all users – approximately one million members – and hope to have completed that by the end of Friday 8 February.
Mumsnet said: “We’re really sorry that our mistake has caused anxiety and we do understand why some MNers will be really worried by this.
“There is no evidence that anyone whose account was switched has done anything malicious, but of course we cannot be sure until we have tracked down and investigate every incidence and every log and contacted the affected posters – we are working very hard to close this down as quickly as possible.”
Even if you have opted out of receiving Mumsnet emails this one about data security will override your opt out.
How is Mumsnet fixing the problem?
By Saturday, Mumsnet had confirmed 46 users were affected by the breach.
“We are currently working to positively identify any users whose accounts were wrongfully accessed by running software to interrogate the server logs in depth. We will inform anyone affected directly with more information as soon as we identify them.”
The company says a software upgrade on 5 February contained the bug, and on Thursday they reversed the changes so that it is no longer in the system.
They have also forced every member to log out of the site to ensure the Thursday update kicks in.
source inews
Industry: Cyber Security News
Latest Jobs
-
- Senior Identity and Access Management Consultant (IDAM)
- Germany
- €70,000 - €85,000
-
(Security Consultant, Technical Consultant, Consultant, IDAM, CyberArk, RSA, Cyber, Security, Germany) Location: Frankfurt *Candidates must be EU based (Germany preferred) as our client are unable to provide sponsorship* Senior Identity and Access Management consultant (IDAM) subject matter expert is needed to lead and drive technical and or business transformation projects in a client facing position for a prestigious consultancy in Frankfurt, Germany. A broad technical knowledge across Identity and access management is essential. Technical hands-on experience with one or more of the following Ping, Forgerock, Cyberark, RSA Aveksa is highly desirable. A successful individual will be client facing and MUST be able to effectively engage, consult and provide advice to complex client engagements. The position will give the Senior Identity and Access Management consultant the opportunity to work with top tier clients with the view of making a meaningful strategic difference. If you are passionate about your industry and specialise in the IDAM space and are looking for a new challenge to step up, apply today and speak with the Security team. Call DCL Search & Selection on 0208 663 4030 and find out about more of our cybersecurity jobs. Reference: TC7528 (Security Consultant, Technical Consultant, Consultant, IDAM, CyberArk, RSA, Cyber, Security, Germany)
-
- Business Development Manager (IoT Connectivity Solutions)
- Frankfurt
- Up to €120,000 plus bonus and benefits
-
Experienced Business Development Manager is required for an expanding Service Provider to sell/position their IOT connectivity solutions into the Manufacturing Sector within the German market. This is a great opportunity to join a key player within this space, who have a number of successful projects for you to reference, they have the skills and the network but now needs the key person to help take the message to market You need to have proven sales experience within the mobile cellular IOT connectivity space and ideally knowledge of the manufacturing sector, this is a true consultancy role, you will be comfortable working with other sales team within the business but also able to directly approach key customers yourself. Great opportunity to join an expanding business as they grow their German Presence Ref: RA7259 (IoT Sales Jobs, IoT Sales, IoT Sales Executive, IoT Business Development Manager)
-
- Services Manager (Telecommunications)
- London
- Up to £75,000 plus benefits and bonus
-
Service Manager with telecommunications experience is required for a tier 1 service provider. You will be responsible for managing a number of key global account, acting as the voice of the customer within the business. Your key objectives will include: Responsibility for overall service relationship with the customer To enhance the customer experience To protect and grow customer revenues You will be working within a global business where you will be managing different services from different parts of the globe and therefore must be able to demonstrate where you have ideally worked within a similar environment. You will be a key member of the service management team responsible for a number of key accounts. You must have experience as a Service Manager from either a telecom/telecommunications or hosting business dealing with services to corporate accounts, you will need to have knowledge around telecom/telecommunications solutions. Ref: RA7255
-
- Infrastructure / Forensic Lab Manager
- London
- Up to £40,000 Base
-
Infrastructure / Lab Manager needed to join a consulting business near London Bridge. MUST be commutable on a daily basis. The Infrastructure / Forensic Lab Manager will be responsible for the upkeep, performance, security/patching etc of the hardware/software used by the consultants across the UK business. Broad IT experience covering both on-prem - Cloud (Azure) environments, Hyper V, Security Information and Event Management tools (such as SPLUNK). Specific experience with Forensic / eDiscovery Labs (Relativity / Nuix) is highly desirable. The Infrastructure / Forensic Lab manager will be a key hire within the technical team being the escalation point for any internal IT issues. Experience liaising with remote/international stakeholder is essential. All details kept in the strictest of confidence. Apply today and or contact Chris.Holt@dclsearch.com *For this position candidates must be UK based and our client is unable to sponsor candidates outside of the EU* Ref: CH7533 (Forensics Jobs, Digital Forensics Jobs, Forensics Lab Manager)