Last mentioned: 2d ago
Guidance Issued
The registrar advises companies to document filing errors and promises to take the outage into account for deadlines.
Vulnerability Identified
Dan Neidle of Tax Policy Associates discovers that the 'back' button allows access to other companies' private data.
Agency Alerted
Companies House is formally notified of the security flaw by Tax Policy Associates.
Service Suspension
Companies House takes the WebFiling portal offline on Friday evening to investigate the breach.
The UK’s corporate registrar, Companies House, has taken its WebFiling service offline following the discovery of a critical security flaw that exposed sensitive director data. The vulnerability allowed unauthorized users to view and potentially edit corporate records, raising significant concerns regarding identity theft and corporate fraud.