UK’s Companies House exposed data linked to millions of firms

Companies House, the UK’s official registrar of companies, has disclosed a security flaw in its WebFiling service that exposed sensitive data tied to more than five million registered businesses.   The issue traces back to a system update rolled out in October 2025 and went unnoticed for five months before it was flagged.  The vulnerability meant logged-in users could access other companies’ records simply […]