Mumsnet has reported itself to the information commissioner after a data breach resulted in users accidentally logging into the accounts of strangers. Mumsnet founder Justine Roberts apologised to users in a post, saying: “You’ve every right to expect your Mumsnet account to be secure and private. Despite the fact that the publication was accidental on the part of the ex-employee, Mumsnet treated it as a data breach, and passed the details on to the ICO. More seriously, in 2014, the site discovered that an attacker was using a widespread bug known as “Heartbleed” to compromise an unknown number of its 1.5 million user accounts. Mumsnet reset user passwords in response to the attack.
Source: The Guardian February 07, 2019 15:19 UTC