Companies House Security Breach Exposes UK Business Data
Want more insights like this?
A major security flaw at Companies House allowed logged-in users to view and potentially edit other companies' confidential information, including directors' home addresses and emails. The breach, discovered Thursday by John Hewitt from Ghost Mail, occurred after a WebFiling system update in October 2025.
Companies House CEO Andy King apologized and confirmed the issue was fixed by Monday, with no current reports of data being accessed. However, unauthorized filings may have been possible during the breach period.
The incident has been reported to the Information Commissioner's Office and National Cyber Security Centre. UK businesses are urged to check their company details and will receive emails explaining how to verify their information.
Source: BBC