Flaw in UK's corporate registry let directors rummage through rival records
ID: aebac6ac-c764-54fd-a4c7-f1cee69270e3
STIX ID: report--aebac6ac-c764-54fd-a4c7-f1cee69270e3
Feed Name: The Register (Security)
Threat Score
Companies House temporarily took its WebFiling service offline after a bug introduced in October 2025 allowed logged-in users to view and potentially modify hidden company details (including dates of birth and residential addresses) for other companies. The flaw was disclosed by a researcher on March 13, 2026, reported to the ICO and NCSC, has been patched, and an investigation is ongoing to determine whether it was abused.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.