Business Bosses Told to Check Details After Companies House Glitch

Why It Matters

The breach jeopardises corporate transparency and could enable identity‑theft‑driven fraud, threatening trust in the UK’s primary business register. Regulators and firms must now tighten cyber‑security and compliance processes to protect stakeholder data.

Key Takeaways

• Glitch allowed cross‑company data editing via back button
• Five million firms potentially exposed to fraud
• Companies House halted WebFiling pending investigation
• Directors urged to audit their public records immediately
• Legal penalties up to five years under Computer Misuse Act

Pulse Analysis

Companies House serves as the official repository for UK corporate information, making data accuracy and security paramount for investors, lenders, and regulators. The recent web‑filing malfunction, triggered by a simple back‑button navigation error, inadvertently opened the door for users to access and modify other companies' filings. By exposing directors' addresses, emails, and dates of birth, the incident compromised the integrity of a database that underpins due‑diligence and anti‑money‑laundering checks across the economy.

The immediate fallout underscores the fragility of digital public‑sector services and the cascading risk to corporate governance. Fraudsters could weaponise altered director details to secure loans, divert assets, or fabricate shell entities, amplifying financial crime vectors. In response, Companies House suspended its filing portal, advised firms to retain error screenshots, and promised leniency for missed deadlines. This pragmatic approach aims to balance regulatory enforcement with operational continuity while signalling to the market that data stewardship is non‑negotiable.

Beyond the UK, the glitch highlights a broader trend of legacy systems struggling under modern cyber‑threats. Organizations must invest in robust authentication, audit trails, and regular penetration testing to safeguard critical registries. For businesses, the episode serves as a reminder to routinely verify public filings and to embed cyber‑risk assessments into boardroom discussions. Strengthening these safeguards will help restore confidence in the corporate register and deter future exploitation by sophisticated bad actors.