Companies House webfiling security issue: What you need to know

Companies House has recently sent an e-mail to all registered e-mail addresses that they hold on their records regarding an issue with its WebFiling service. While the issue has now been resolved and was not the result of a cyber-attack, it is important that businesses are aware of what happened and take a moment to review their company records as a precaution.

What happened

The issue was identified on 13 March, at which point the WebFiling service was taken offline while investigations were carried out. The service was restored on 16 March following testing.

The cause was linked to a system update introduced in October 2025. Under certain circumstances, it created the potential for a logged-in user to access information that is not normally visible on the public register. This included details such as full dates of birth and residential addresses for directors and persons with significant control.

It also introduced the possibility that company information could be updated without the appropriate authority.

Companies House has confirmed that:

• This was not a cyber-attack
• No identity verification data (such as passports or personal codes) was accessed
• No existing filed documents could be altered

At present, there are no confirmed reports of data being accessed or company information being changed without permission.

Why this matters

Although the risk appears limited, this update serves as a useful reminder of the importance of keeping your company records under review.

Your Companies House record is a public and legal representation of your business. It is relied upon by lenders, investors, and other stakeholders, and forms part of your statutory compliance obligations. Ensuring that this information remains accurate is therefore essential.

What you should do now

Companies House has advised all companies to take a precautionary approach.

You should take a moment to review your company’s details and filing history to ensure everything appears correct and familiar. This includes checking director and shareholder information, registered details, and any recent filings.

In most cases, this will simply provide reassurance that everything is in order. However, if anything appears unexpected, it is important to act promptly.

Companies House can be contacted directly if you identify any discrepancies.

A practical step to consider

To help maintain visibility going forward, you may wish to sign up to the Companies House “Follow” service. This provides email alerts whenever a filing is made for your company, allowing you to identify any unexpected changes at an early stage.

Final thoughts

While this issue has now been resolved and appears to be limited in scope, it is a timely reminder that company records should not be treated as static.

Taking a few moments to review your information now provides reassurance and helps ensure that your company’s public record continues to accurately reflect your business.

If you have any concerns

If anything does not look familiar, or you are unsure what you are seeing, please contact Companies House on enquiries@companieshouse.co.uk. They will be able to guide you on any next steps if required.