Companies House Restores WebFiling After Flaw Exposed Director Details

Companies House temporarily took its WebFiling service offline after discovering a vulnerability that, for a short weekend window, allowed logged-in users to view and potentially alter other companies' filing accounts — exposing personal and company information (such as directors' dates of birth, residential addresses, and company emails) and enabling possible unauthorized filings to appear on public records. The agency patched the issue, performed independent testing, and is investigating whether any records were modified without permission, urging organisations to review their filings and promising to notify affected parties.