,

Companies House warns about WebFiling security issue

Companies House has recently confirmed a security issue affecting its WebFiling service, and we want to ensure our clients are fully informed and reassured.

On 18 March 2026, Companies House notified registered users that it had identified a flaw in its WebFiling system on 13 March 2026. The issue relates to a system update introduced in October 2025 as part of the move towards enhanced identity verification.

What was the issue?

According to Companies House, the flaw may have allowed individuals with an existing WebFiling account, in certain circumstances, to:

  • Submit filings for companies they were not authorised to act for
  • Access limited non-public information, including:
    • The full date of birth (including day) for directors and Persons with Significant Control (PSCs)
    • Residential addresses for directors and PSCs
    • Company registered email addresses

Importantly, Companies House has confirmed that:

  • Passwords were not compromised
  • Identity documents (such as passports or driving licences) were not accessed
  • Previously filed documents could not be altered

What is happening now?

Companies House is currently analysing its data to determine whether any unauthorised filings have taken place as a result of this issue. As a precaution, all companies are being encouraged to review their records and report anything unusual.

Our position

As part of our ongoing company secretarial monitoring, Alexander Knight & Co has not identified any suspicious or unauthorised filings in relation to our clients to date.

We are continuing to monitor the situation closely and will provide further updates if required.

Murray Patt, founder of Alexander Knight & Co, said:

“This is clearly a concerning development, but it’s important to keep it in perspective. At this stage, there is no indication of widespread misuse, and safeguards remain in place.

“Our role is to stay close to the detail, monitor our clients’ records carefully and act quickly if anything looks out of the ordinary. We would encourage all clients to remain vigilant, but also reassured that we are actively overseeing this on their behalf.”

What should you do?

At this stage, we recommend:

  • Keeping an eye on your Companies House filings and records
  • Flagging any unexpected changes or unfamiliar filings immediately

If you have any concerns, please contact our colleague Kate Rowbottom (kate@alexanderknightaccountants.co.uk) in the first instance and we will review this with you promptly.

/by
,

“Show us your ID!”

From 18 November 2025, all company directors and persons with significant control (PSCs) in the UK will be required to verify their identity with Companies House. This is part of a major reform under the Economic Crime and Corporate Transparency Act, aimed at strengthening the integrity of the UK’s corporate registry.

Why?

The UK has long been recognised as one of the easiest places in the world to set up a company. Unfortunately, that simplicity has also been exploited by fraudsters and criminals setting up fake or illegitimate companies to commit fraud, launder money, or mislead the public.

This new ID verification process is designed to:

  • Prevent fraudulent companies from being set up with false director information
  • Improve the accuracy of the Companies House register
  • Deter criminals from using UK companies for illegal activity
  • Build trust in UK businesses, especially among international partners and investors

At its core, this reform is about making sure that the people running UK companies are who they say they are.

Who needs to verify?

  • New directors and PSCs will be required to verify their identity at the point of incorporation or appointment.
  • Existing directors and PSCs will have 12 months from the 18 November start date to complete the process and must do so before filing their next confirmation statement.
  • There is a 14-day deadline for newly appointed PSCs to verify after being recorded.

We recommend:

  • Verifying early – Don’t leave it until just before your confirmation statement is due.
  • Being cautious – Only respond to legitimate notifications and avoid scams or phishing emails related to this process.
  • Getting in touch with us if you’re unsure – we may be able to verify your ID for you.

If you are a client of Alexander Knight & Co, rest assured we’ll help you stay fully compliant with the new regulations. If you have any questions about what you need to do, just get in touch with our team.

/by