Email to registered companies about the WebFiling security issue
gov.uk
gov.uk
1. See certain data not normally published on the public register:
- the day of the date of birth for directors and PSCs
- residential address for directors and PSCs
- company registered email address
2. File updates to any information without consent. For example, new accounts or changes of director."
And more weasel words at:
The issue could only have been exploited by a logged-in user performing a specific set of actions.
At this stage, we have no confirmed reports of any data having been accessed or changed without permission, and we believe the issue could not have been used to extract data in large volumes.
This said, it's not that bad, that's true. But the idea of having the personal residential address exposed is not great either.
As for the the personal residential address exposure, it is a huge breach. This website keeps certain Directors' private info private for very good reason. I look forward to the regulators, ICO, imposing an appropriately huge fine.
And just love the "if we find evidence that anyone has accessed or changed another company’s details without authorisation, we will take firm action." Firm action internally, right? Right?