PM / DM viewing bug

Between the last software update on 2021-09-15T04:00:00Z and 2021-09-17T08:30:00Z, a bug in the Discourse software allowed some PM’s to be viewed by other site members under some circumstances. We are looking into the exact details and checking logs to determine what may have been accessed and when, as well as what further action to take.

We may contact specific individuals as we find out more, but if anyone has any specific concerns, please contact support@se23.life or message @moderators.

Please accept my sincere apologies for this error.

Good job fixing it

This has now been analysed.

To be clear, it was just the PM / DM titles and member icons that were being listing in member inboxes and message contents were not able to be accessed or viewed. Only logged-in members would have been able to see this data, and from inspecting logs there were 6 members who likely suffered this viewing bug.

In keeping with ICO recommendations, I have made a log of this event, but will not be reporting it since the amount of data and number of members affected is minimal.

Thank you to @stuartg who alerted me to the problem this morning, and apologies once again for not spotting the error sooner myself.