Companies House: Cybercrime
The question
To ask the Secretary of State for Business and Trade, with reference to the Companies House news story titled Update on Companies House WebFiling security issue, published on 16 March 2026, how many unique user accounts successfully performed the set of actions required to access another company’s details without consent during the period the vulnerability was active.
Answered by Blair McDougall
It is not currently possible to determine the number of unique user accounts affected. However, Companies House is investigating this from both a technical and customer perspective. Following the initial report, ongoing investigations have found no subsequent confirmed cases of personal data having been accessed without permission as a result of the issue. There is no confirmed evidence that any records have been changed. The absence of any new confirmed cases is welcome, although investigations continue.
Verbatim has judged this answer against the question that was actually asked — answered, partly answered, or evaded. Sign in to see the verdict →