| Updated:
Business directors are urged to check their details after a major glitch on Companies House allowed people to edit the data of other firms, leaving them potentially exposed to fraud.
On Friday, a tech glitch on the UK’s official corporate register permitted people to access other companies’ details by pressing the back key on the site’s dashboard.
This led to the potential exposure of the five million companies on the register and allowed people to view directors’ addresses, email addresses, and dates of birth, all due to the tech bungle.
Dan Neidle, founder of Tax Policy Associates and the man who alerted Companies House to the problem, posted on X “anyone who owns a company should check its Companies House details right now”.
Neidle said: “This could have been used to create replace all the directors of Goldman Sachs with Mickey Mouse.
“But the experts we spoke to thought sophisticated bad actors would target limited numbers of small companies; change office/directors, apply for loans, run off with the money.”
The Rising Tide of Corporate Data Breaches
The Companies House vulnerability is the latest in a string of high-profile data breaches impacting UK businesses. Just last week, Lloyds Banking Group experienced a technical glitch exposing customer transactions. These incidents highlight a systemic weakness in the security infrastructure supporting UK commerce.
The potential for fraud is significant. Attackers could employ compromised data to apply for loans, establish fraudulent accounts, or even divert funds from legitimate businesses. The case of Sophie, whose address was fraudulently changed and used to set up fake companies in 2025, demonstrates the real-world consequences of such vulnerabilities.
New Powers and Future Safeguards
The introduction of the Economic Crime and Corporate Transparency Act is intended to bolster Companies House’s defenses. The Act provides new powers to validate information and act swiftly when fraudulent activity is detected. However, the recent glitch underscores that legislative changes alone are insufficient.
Experts suggest a multi-layered approach to security is crucial. This includes enhanced authentication protocols, real-time monitoring for suspicious activity, and robust data encryption. Companies House has suspended its online filing service while it investigates the issue and implements corrective measures.
The Impact on Small Businesses
Small and medium-sized enterprises (SMEs) are particularly vulnerable to these types of attacks. Often lacking the dedicated security resources of larger corporations, SMEs can be easy targets for fraudsters. The potential financial and reputational damage can be devastating.
Proactive monitoring of Companies House records is now essential for all business owners. Regularly checking company details and director information can help identify and address fraudulent activity quickly.
Crackdown on Fraudulent Firms
Companies House has been actively cracking down on fraudulent firms. Over 11,500 firms have been struck off the register in the past year as part of a coordinated effort to combat fraud and money laundering. This demonstrates a commitment to cleaning up the corporate register and protecting legitimate businesses.
What’s Next for Corporate Transparency?
The recent events are likely to accelerate the push for greater corporate transparency. Expect to see increased scrutiny of company ownership structures and a greater emphasis on verifying the identities of directors and shareholders. Digital identity verification solutions may become more prevalent as Companies House seeks to strengthen its defenses.
FAQ
- What should I do if I suspect my company details have been compromised? Check your Companies House record immediately and report any discrepancies to Companies House and Action Fraud.
- What is the Economic Crime and Corporate Transparency Act? It is legislation designed to supply Companies House more powers to combat fraud and improve corporate transparency.
- Is Companies House liable for damages caused by the data breach? Here’s a complex legal question that will likely be subject to further scrutiny.
Pro Tip: Set up Google Alerts for your company name and director names to be notified of any changes to your Companies House record.
