Companies House: Cybercrime

(asked on 16th March 2026) - View Source

Question to the Department for Business and Trade:

To ask the Secretary of State for Business and Trade, with reference to the Companies House news story titled Update on Companies House WebFiling security issue, published on 16 March 2026, how many unique user accounts successfully performed the set of actions required to access another company’s details without consent during the period the vulnerability was active.


Answered by
Blair McDougall Portrait
Blair McDougall
Parliamentary Under Secretary of State (Department for Business and Trade)
This question was answered on 19th March 2026

It is not currently possible to determine the number of unique user accounts affected. However, Companies House is investigating this from both a technical and customer perspective. Following the initial report, ongoing investigations have found no subsequent confirmed cases of personal data having been accessed without permission as a result of the issue. There is no confirmed evidence that any records have been changed. The absence of any new confirmed cases is welcome, although investigations continue.

Reticulating Splines