Skip to main content
See every side of every news story
Published loading...Updated

Companies House Security Issue: UK Firms Urged to Check Details

The flaw exposed sensitive details like dates of birth and addresses to logged-in users and was fixed after being introduced in October 2025.

  • On Monday, Companies House restored its WebFiling service after resolving a security flaw that allowed logged-in users to access and edit private data belonging to other firms.
  • An internal investigation suggests the glitch originated during a WebFiling system update in October, remaining undetected until John Hewitt, director of operations at Ghost Mail, identified the vulnerability on Thursday.
  • The bug exposed data for 5 million companies, potentially allowing users to access directors' residential addresses, dates of birth, and company emails through repeated browser back-button presses.
  • Companies House CEO Andy King apologized for the incident and reported it to the Information Commissioner's Office and National Cyber Security Centre, confirming that passwords remained secure.
  • King vowed to take "firm action" if evidence of misuse emerges, while the agency emails businesses with guidance on checking their registered details for unauthorized changes.
Insights by Ground AI
Podcasts & Opinions

13 Articles

Think freely.Subscribe and get full access to Ground NewsSubscriptions start at $9.99/yearSubscribe

Bias Distribution

  • 50% of the sources are Center
50% Center

Factuality Info Icon

To view factuality data please Upgrade to Premium

Ownership

Info Icon

To view ownership data please Upgrade to Vantage

City AM broke the news in London, United Kingdom on Monday, March 16, 2026.
Too Big Arrow Icon
Sources are mostly out of (0)

Similar News Topics

News
Feed Dots Icon
For You
Search Icon
Search
Blindspot LogoBlindspotLocal