CyberHappenings logo
☰
Home Browse Watchlists Experimental About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Companies House WebFiling Dashboard Vulnerability Exploited for Fraud

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

The UK’s Companies House suspended its WebFiling dashboard after a security flaw allowed unauthorized access to corporate and personal details of directors. The vulnerability enabled attackers to view and potentially modify registration details of around five million companies, exposing them to phishing and fraud. The flaw was discovered by Dan Neidle and John Hewitt, who demonstrated how easy it was to exploit. Companies House has taken the dashboard offline for investigation, but the extent of the impact and whether modifications were made remains unclear. Directors are advised to check their registration data for unauthorized changes.

Timeline

  1. 16.03.2026 12:30 1 articles · 1h ago

    Companies House WebFiling Dashboard Vulnerability Exploited for Fraud

    The UK’s Companies House suspended its WebFiling dashboard after a security flaw allowed unauthorized access to corporate and personal details of directors. The vulnerability enabled attackers to view and potentially modify registration details of around five million companies, exposing them to phishing and fraud. The flaw was discovered by Dan Neidle and John Hewitt, who demonstrated how easy it was to exploit. Companies House has taken the dashboard offline for investigation, but the extent of the impact and whether modifications were made remains unclear. Directors are advised to check their registration data for unauthorized changes.

    Show sources
    Open in new tab

Information Snippets