[Chapter-delegates] MemberNova Update

[Christine Saegesser]

Dear colleagues,

Please see the MemberNova update from Joyce Dogniez below:
——————
Dear all,

I am writing to give you a heads-up that we have restored our MemberNova service. We recognize that removing MemberNova functionality caused disruptions for many of our chapters and members. We regret any inconvenience this has caused you, and we want to thank you for your patience while our team worked to bring this service back online.

We will be providing an update about what happened shortly to all Internet Society members, and we wanted to make sure you are aware and are prepared to answer questions should you receive them. We have included talking points at the end of this email to help address any questions you receive from members of your chapter.

We also want to update you directly on what happened. Our current understanding is that our system was configured incorrectly by MemberNova, the association management system we use, which made some Internet Society member data publicly accessible.

We are still working to better understand the potential risks associated with this issue, but we are not currently aware of any instances of malicious access as a resulting from it. The member data maintained in MemberNova includes personal information, but we do not yet have confirmed details about what exactly was publicly accessible. At this time, we understand that this information could have, in some instances, included data such as name, email address, phone number, location, employment information, social media information, or other types of data members have provided through MemberNova.

Beginning on 10 December, we took our MemberNova service offline and began working with MemberNova to correct the issue and as a result, data there is no longer publicly accessible. Again, while some member data was publicly accessible, we are not aware of any evidence of malicious access, and we will keep you informed if anything changes.

As we noted in our prior email, after we learned of the issue, we launched an investigation. The investigation is continuing, and we will provide more details when we have more information to share. Going forward, updates will be posted at updates.internetsociety.org<http://updates.internetsociety.org>, and we encourage you to check there for additional information. The membership password to access this website is ISOC-AMS-Updates (case sensitive).

We deeply regret this issue occurred with one of our vendors. We take the security of member data seriously and are working on measures to further enhance the security of our association management system and protect member data. We truly appreciate your cooperation and patience during this process.

If you or any members of your chapter have questions about this issue, please go to updates.internetsociety.org<http://updates.internetsociety.org> or call +1 855 618 3109 or +44 121 790 0389 Monday through Friday from 2:00 PM to 11:30 PM UTC (carrier rates may apply). For any inquiries about resuming activities or operations that have been affected by the outage of MemberNova or Connect, please contact us at chapter–support at isoc.org<mailto:chapter%E2%80%93support at isoc.org>.

Sincerely,

Joyce Dogniez
Vice President Community Engagement

+++

Talking Points for Chapter Leaders to Use with Members

  *   As of 21 December, Internet Society has restored its MemberNova service.
  *   The Internet Society has provided me with information they have confirmed at this time, and I can share it with you to help explain what happened.
  *   The Internet Society’s current understanding is that its system was configured incorrectly by MemberNova, the association management system it uses, which made some Internet Society member data publicly accessible.
  *   The organization is working to better understand the potential risks associated with this issue, but it is not currently aware of any instances of malicious access as a result of it.
     *   The member data maintained in MemberNova includes personal information, but the Internet Society does not yet have confirmed details about what exactly was publicly accessible.
     *   At this time, the organization understands that this information could, in some instances, include data such as name, email address, phone number, location, employment information, social media information, or other types of data members have provided through MemberNova.
  *   Beginning on 10 December, the Internet Society took its MemberNova service offline and began working with MemberNova to correct the issue and, as a result, data there is no longer publicly accessible.
  *   The investigation is continuing, and the Internet Society will provide more details when they have more information to share.
  *   Going forward, they have said that updates will be posted at updates.internetsociety.org<http://updates.internetsociety.org>, and members are encouraged to check there for additional information.
     *   The membership password to access this website is ISOC-AMS-Updates (case sensitive)
  *   If you have questions about this issue, please check updates.internetsociety.org<http://updates.internetsociety.org> or call +1 855 618 3109 or +44 121 790 0389 Monday through Friday from 2:00 PM to 11:30 PM UTC. Carrier rates may apply.
  *   For any inquiries about resuming activities or operations that have been affected by the outage of MemberNova or Connect, please contact chapter–support at isoc.org<mailto:chapter%E2%80%93support at isoc.org>.

If you are asked a question you can’t answer, please say:

  *   Thank you for that question, please refer any additional questions to +1 855 618 3109 or +44 121 790 0389.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://elists.isoc.org/mailman/private/chapter-delegates/attachments/20211221/eeb2cd87/attachment.htm>