UK’s Companies House confirms security flaw exposed business data
The WebFiling service, which was shut down on Friday to address a security vulnerability that exposed company data since October 2025, is now operational again, according to firms House, the British government organization that runs the registry for all U.K. firms.
After Ghost Mail's John Hewitt failed to receive a response, Dan Neidle, the founder of the nonprofit Tax Policy Associates, reported the vulnerability to the U.K. corporation register on Friday.
All you had to do was access your company's dashboard by logging into Companies House with your personal information. Then, according to Neidle, choose to "file for another company" and input the company number for any of the five million businesses that are listed with Companies House.
You would then be required to provide an...