Summary
Companies in the UK were advised to review their data on the Companies House website due to a security issue that may have allowed unauthorized access to sensitive information. The problem emerged from a system update in October 2025, enabling users to potentially view and edit other companies' details. Companies House has fixed the issue and is working with authorities to investigate the incident.
Key Facts
- A glitch on the Companies House website may have allowed users to access other companies' sensitive data.
- The issue involved the potential exposure of directors' home addresses and emails.
- Companies House resolved the problem within a few days and reported it to relevant authorities.
- The security issue began after a system update in October 2025.
- Andy King, Companies House chief executive, apologized and committed to supporting affected businesses.
- An investigation is ongoing to determine the extent of data access or modification.
- The Information Commissioner's Office (ICO) and National Cyber Security Centre (NCSC) are involved in the response.
- Companies House assured that identity verification data like passports were not compromised.
