Companies House blunder

A Companies House blunder has raised concerns after a flaw in the WebFiling service briefly exposed sensitive company data. The issue, identified on 13 March 2026, meant that a logged-in user could potentially access and amend limited details of another company.

Companies House has stated that the flaw was fixed within hours of discovery and that they are contacting the small number of affected companies to ensure their data remains secure.

What exactly happened?

The technical glitch occurred during a routine system update. For a short period, a vulnerability in the WebFiling platform allowed users who were logged into their own company account to view the filing history and some restricted details of other registered companies. In a very small number of cases, it was theoretically possible for a user to submit a filing on behalf of a company they did not represent.

Companies House moved quickly to take the WebFiling service offline once the issue was identified. The vulnerability was patched, and the service was restored later the same day. A subsequent investigation confirmed that no mass data breach occurred, and the risk was contained.

The broader implications

While this specific incident was resolved swiftly, it highlights ongoing concerns about the security and integrity of the UK's corporate register. The government relies heavily on Companies House data to tackle economic crime, money laundering, and corporate fraud. Any vulnerability in the system undermines confidence in the register's accuracy.

This event also underscores the importance of the upcoming identity verification requirements being introduced under the Economic Crime and Corporate Transparency Act. By mandating that all directors and persons with significant control verify their identity, Companies House aims to create a more robust and secure system, making it much harder for unauthorised individuals to access or manipulate company records.

What should company directors do?

If your company was affected by this specific glitch, Companies House will contact you directly. However, all directors should take this opportunity to review their company's security practices. Ensure that your WebFiling authentication code is kept secure and is only shared with trusted individuals, such as your accountant. You should also regularly check your company's public record on the Companies House website to ensure that all filings are accurate and authorised.