Companies House Admits Massive Security Loophole Was Open for Six Months

Companies House Admits Massive Security Loophole Was Open for Six Months

A security loophole which allowed any Companies House user to change the details of other companies' accounts was live at least for six months, and was

All UK firms urged to check Companies House records after data exposed during five-month ‘security issue’

A tech update made in the autumn is thought to have introduced a vulnerability that enabled users to access information on their rival firms, and even make unauthorised business filings Companies House has urged all of the UK’s five million registered business to check their online data and records of official submissions following a “security issue” lasting five months in which unauthorised users may have been able to access and amend informati…

Companies House suspends online filing service after cyber vulnerability exposes director data

Companies House has suspended its online WebFiling service after a cyber vulnerability allowed users to access and potentially edit sensitive personal data belonging to other businesses registered on the UK’s corporate register. The issue emerged after a security flaw in the government agency’s online dashboard allowed individuals to navigate into the accounts of other companies simply by pressing the browser’s back button. According to reports,…

Update on Companies House WebFiling security issue

Statement from Andy King, Chief Executive of Companies House, on the WebFiling security issue.   On Friday 13 March, Companies House was made aware of a security issue which meant that a logged-in user of our WebFiling service could potentially access and change some elements of another company's details without their consent after performing a specific set of actions.

Business bosses told to check details after Companies House glitch

Business directors are urged to check their details after a major glitch on Companies House allowed people to edit the data of other firms, leaving them potentially exposed to fraud. On Friday, a tech glitch on the UK’s official corporate register permitted people to access other companies’ details by pressing the back key on the site’s dashboard. This led to the potential exposure of the five million companies on the register and allowed people…