UK: Companies House Web Glitch Exposes Corporate Details to Fraudsters

A logic/authentication flaw in the UK Companies House WebFiling system allowed a logged-in user to access other companies' dashboards (and potentially view or change registration data) by initiating a filing for another company and using the browser back button to bypass the authentication code step; researchers demonstrated the issue, Companies House took WebFiling offline pending investigation, and up to five million directors' personal and corporate information may have been exposed, raising risks of phishing, fraud and unauthorized account actions.