Back to today’s briefing

Story perspectives

Security Flaw at Companies House Exposed User Data

3/16/2026

34 5 Full Breakdown

Summary

Story summary

An October 2025 technical update at Companies House created a security flaw that let logged-in users access and alter other companies’ details without consent.
The WebFiling service was shut down for investigation and resumed on March 16, 2026.
CEO Andy King apologized and said no passwords or identity verification data were compromised.
The incident was reported to the Information Commissioner’s Office and the National Cyber Security Centre.

History

Historical Context

The 2015 data breach of the U.S. Office of Personnel Management, which exposed 22 million records, intensified scrutiny on cybersecurity practices globally. In 2025, a security flaw at Companies House allowed unauthorized access to sensitive information, underscoring ongoing vulnerabilities. This prompted regulatory bodies like the Information Commissioner’s Office to enhance enforcement of cybersecurity standards to better protect user data.

1 of 2

Story summary

An October 2025 technical update at Companies House created a security flaw that let logged-in users access and alter other companies’ details without consent.
The WebFiling service was shut down for investigation and resumed on March 16, 2026.
CEO Andy King apologized and said no passwords or identity verification data were compromised.
The incident was reported to the Information Commissioner’s Office and the National Cyber Security Centre.

1 / 2