Email to registered companies about the WebFiling security issue

Email to registered companies about the WebFiling security issue - GOV.UK Cookies on GOV.UK We use some essential cookies to make this website work. We’d like to set additional cookies to understand how you use GOV.UK, remember your settings and improve government services. We also use cookies set by other sites to help us deliver content from their services. You have accepted additional cookies. You can change your cookie settings at any time. You have rejected additional cookies. You can change your cookie settings at any time. Accept additional cookies Reject additional cookies View cookies Hide cookie message Skip to main content Companies House Print this page © Crown copyright 2026 This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: [email protected] . Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned. This publication is available at https://www.gov.uk/government/publications/email-to-registered-companies-about-the-webfiling-security-issue/email-to-registered-companies-about-the-webfiling-security-issue Important information about your Companies House account This is an official email from Companies House, sent to all registered email addresses, and is relevant to all companies registered in the UK. If you’re a third-party agent who has received this email on behalf of a company, please read and forward this message to the company director(s) of all companies you work with. We are writing to let you know about an issue that affected our WebFiling service , and to explain what you should do next. This advice is relevant to all companies, whether or not you use the WebFiling service to file. On Friday 13 March, we identified an issue with WebFiling. We took the service offline at 1:30pm that day while we investigated and fixed the problem. WebFiling has been independently tested and has been back online since 9am on Monday 16 March. The issue arose from a system update in October 2025 and was not the result of a malicious attempt to attack our systems. It is not a cyber-attack. The issue could only have been exploited by a logged-in user performing a specific set of actions. Our investigation found that it was technically possible for a logged-in registered user to: 1. See certain data not normally published on the public register: the day of the date of birth for directors and PSCs residential address for directors and PSCs company registered email address 2. File updates to any information without consent. For example, new accounts or changes of director. We want to reassure you that: You do not need to reset your WebFiling password. No identity verification data, such as passport information or personal codes, was accessed. No existing filed documents could have been altered. If you have applied to protect your personal details under the Companies Act 2006, your information was not affected by this issue. What you should do now We are contacting you proactively on a precautionary basis to make you aware of this issue. At this stage, we have no confirmed reports of any data having been accessed or changed without permission, and we believe the issue could not have been used to extract data in large volumes. However, as a precaution, please check your registered details and filing history to make sure everything looks correct. You can do this in WebFiling and on the Find and update company information service . If anything seems incorrect or unexpected, please contact us on [email protected] using ‘WebFiling issue’ in the subject heading. Please include as much detail as you can about your concern, including your company name and number. The more information you can give us to support our investigation - the easier it will be to resolve the issue for you. Further recommendations We also recommend signing up to our free Follow service . Follow sends you an instant email alert whenever a document is filed with us for any company you choose to follow — including your own. It’s a simple way to stay informed and spot anything unexpected as soon as it happens. You can sign up through the Find and update company information service and then select ‘Follow this company’ on your company’s page. Next steps We have reported this incident to the Information Commissioner’s Office (ICO). We are analysing our data, and if we find evidence that anyone has accessed or changed another company’s details without authorisation, we will take firm action. We will keep you updated as our investigation progresses. An apology We recognise that this incident may have caused concern, and we are sorry for that. Companies House takes its responsibility to protect your data extremely seriously, and we are committed to doing everything we can to support those affected and to maintaining your trust in our services. You’ve received this email because you provided this registered email address to Companies House. You cannot unsubscribe from emails to the registered email address as this is a legal requirement under the Companies Act 2006. We will only use this email address to communicate about your company. The registered email address will not appear on the public register. To change the company’s registered email address, go to: find-and-update.company-information.service.gov.uk/registered-email-address This is a no-reply email. If you need to contact us because you did not provide this email address as a registered email address, please email [email protected] . Back to top Is this page useful? Maybe Yes this page is useful No this page is not useful Thank you for your feedback Report a problem with this page Help us improve GOV.UK Don’t include personal or financial information like your National Insurance number or credit card details. This field is for robots only. Please leave blank What were you doing? What went wrong? Send Cancel Help us improve GOV.UK To help us improve GOV.UK, we’d like to know more about your visit today. Please fill in this survey (opens in a new tab ) . Cancel