Overview of the Companies House incident
A recent issue at Companies House has raised concerns for many businesses. A flaw in the WebFiling service briefly exposed sensitive company information. The issue came to light on 13 March 2026. At that point, a logged‑in user could potentially access limited details of another company. This occurred only by following a specific sequence of actions. Although the issue did not affect the general public, it still caused concern. Only users with authorised access codes could exploit the vulnerability. However, the risk remained significant. Therefore, Companies House moved quickly to investigate.
What went wrong with companies house WebFiling
The flaw related specifically to the companies house WebFiling system. It allowed limited visibility of private information. This included dates of birth, residential addresses, and company email addresses. In addition, there was a risk of unauthorised submissions. These could have included accounts or changes to director details. Importantly, Companies House confirmed that passwords remained secure. Identity verification data was also unaffected. Furthermore, previously filed documents could not be altered. These assurances reduced the overall risk. Nevertheless, concern remained for affected companies.
Immediate action taken by Companies House
Once identified, Companies House shut down the WebFiling service promptly. The shutdown occurred at 13:30 on 13 March. This step allowed investigators to assess the issue fully. Independent testing followed shortly after. Following this review, the service was restored at 09:00 on 16 March. Companies House confirmed that the vulnerability had been resolved. Therefore, normal filing activity could resume.
Cause and regulatory reporting
The issue appears linked to a systems update from October 2025. As a result, Companies House reported the incident promptly. Both the Information Commissioner’s Office and the National Cyber Security Centre received notifications. This ensures appropriate oversight and transparency.
What companies should do now
Companies should now review their records carefully. This includes registered details and recent filing history. Although no confirmed misuse has been reported, vigilance remains essential. Early review may identify irregularities quickly. If a concern arises, companies should act promptly. They should submit a complaint through the Companies House complaints procedure. Supporting evidence should accompany the submission. This helps investigations progress efficiently.
Lessons from the companies house webfiling issue
This incident highlights the importance of monitoring public records. It also shows how quickly issues can arise. Therefore, regular reviews of filings remain good practice. Staying informed helps reduce risk and maintain confidence.
