The WebFiling service, which was shut down on Friday to address a security vulnerability that exposed company data since October 2025, is now operational again, according to firms House, the British government organization that runs the registry for all U.K. firms.
After Ghost Mail’s John Hewitt failed to receive a response, Dan Neidle, the founder of the nonprofit Tax Policy Associates, reported the vulnerability to the U.K. corporation register on Friday.
All you had to do was access your company’s dashboard by logging into Companies House with your personal information. Then, according to Neidle, choose to “file for another company” and input the company number for any of the five million businesses that are listed with Companies House.
You would then be required to provide an authentication code, which you obviously do not have. No issue. To go back to your dashboard, repeatedly press the “back” key. However, it’s not your dashboard. It’s the dashboard of the other company.
According to Neidle, the vulnerability exposed the home and email addresses of five million registered businesses read more about UK’s Companies House confirms security flaw exposed business data.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.