Connect with us

Business

Companies House suspends filing service after glitch puts personal data at risk

Published

on

Companies House suspends filing service after glitch puts personal data at risk



Companies House suspended its online filing service after a glitch allowed people to edit the personal data of other businesses and potentially expose them to fraud.

A vulnerability in the UK’s official corporate register allowed people to access other companies’ details by pressing the back key on their site’s dashboard.

Data that could reportedly be viewed because of the glitch included directors’ home addresses, email addresses, and dates of birth.

Companies House was alerted to the issue on Friday by Dan Neidle, founder of Tax Policy Associates.

Mr Neidle said the glitch could be “very serious” if it was in place for a long time, adding it was an “absolutely insane vulnerability in how easy it is to find”.

He told the Press Association: “People could get enough data about a company and its directors to potentially commit fraud – to pretend to be it.

“Even worse, they could change the address to their address so they could pick up documents and, if you could file accounts, you could do all kinds of damage.”

Discussing the glitch, Mr Neidle added: “If it was only there for 36 hours, then maybe it’s fine.

“But if it was there for a month or more, it’s very serious.

“Security researchers say 15 days is the average time it takes for a vulnerability to be exploited, and this was a particularly easy vulnerability with no hacking required.”

A Companies House spokesperson said on Friday evening: “We are aware of an issue with our WebFiling service and have closed it while we investigate.

“We apologise for any inconvenience to our customers.”

In guidance for affected customers, Companies House stated: “If you miss your filing deadline due to the service being unavailable, there’s no need to call us.

“File as soon as you can once the service is available, and take a screenshot of any error messages and note the time and date. We’ll take this evidence into account if you cannot file.”

Under the Computer Misuse Act 1990, unauthorised access to computer material carries a maximum prison sentence of two years, and the penalty increases to up to five years for accessing data with the intent to commit further offences, such as fraud.

Companies House maintains records of more than five million companies, including large FTSE 100 companies such as AstraZeneca, Shell, and Tesco.



Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Business

Just Eat and Autotrader among five firms under investigation over online reviews

Published

on

Just Eat and Autotrader among five firms under investigation over online reviews



Food delivery giant Just Eat, funeral firm Dignity and motor platform Autotrader are among five firms under investigation by the UK’s competition watchdog as part of its crackdown on fake and misleading online reviews.

The Competition and Markets Authority (CMA) said it had launched probes against the companies – also including customer review and feedback firm Feefo and Pasta Evangelists – to see whether consumer laws have been broken.

Since April last year, companies have been banned from certain tactics around online reviews under law, such as fake posts, paid-for reviews that are not clearly marked as incentivised, as well as for hiding negative feedback.

Sarah Cardell, chief executive of the CMA, said: “Fake reviews strike at the heart of consumer trust – with many of us worrying about misleading content when looking at reviews online.

“With household budgets under pressure, people need to know they’re getting genuine information – not reviews or star ratings that have been manipulated to push them towards the wrong choice.

“We’ve given businesses the time to get things right. Now we’re deploying our new powers to tackle some of the most harmful practices head on.”

The CMA said it was looking into whether Just Eat’s ratings system had inflated some restaurant and grocer star ratings, giving a misleading picture of quality.

For Autotrader and Feefo, the CMA is investigating whether a number of one-star reviews – moderated by Feefo, which handles reviews for the new and used car site – were hidden on the platform and did not count towards the star ratings.

Dignity is under investigation by the CMA into whether it asked staff to write positive reviews about the firm’s crematoria services.

And artisan fresh pasta chain Pasta Evangelists is being probed over allegations it offered customers discounts for leaving five-star reviews on delivery apps without this being disclosed.

If the CMA finds the firms have broken the law, it can order them to change their practices and fine them up to 10% of their annual global sales.

An Autotrader spokesperson said: “We endeavour always to operate as a responsible and compliant business and will co-operate fully with the CMA’s investigation.”

It comes after the CMA recently secured commitments from Google and Amazon to beef up their systems to identify and remove fake reviews.

Amazon last June agreed to put in place “robust processes” to quickly detect and remove fake reviews alongside sanctions for rogue sellers and businesses after an investigation by the CMA to curb the customer hazard.

The tech giant said it would sanction businesses that boost their star ratings via bogus reviews or catalogue abuse, including bans from selling on the website, while users could also be banned for posting fake reviews.

Consumer group Which? welcomed the investigations and said the CMA must “get tough” on firms found to be breaking the law with reviews.

Sue Davies, head of consumer rights policy at Which?, said: “Investigations are a welcome first step, but enforcement will be key – the regulator must be prepared to get tough, use its powers and issue serious fines if these companies aren’t playing by the rules.”

The CMA said it swept more than 100 review publishers as part of the clampdown and sent advisory letters to 54 firms to improve their compliance with the law, with 90% having made changes in response and 75% telling the watchdog they better understood the rules.



Source link

Continue Reading

Business

Australia fuel crisis: Panic buying prompts PM to reassure nation over fuel supply

Published

on

Australia fuel crisis: Panic buying prompts PM to reassure nation over fuel supply



Anthony Albanese says nation’s supply remains “secure” amid reports of panic buying and shortages.



Source link

Continue Reading

Business

Meta and YouTube found liable in social media addiction trial

Published

on

Meta and YouTube found liable in social media addiction trial



A woman has been awarded $6m in a verdict that could have implications for hundreds of other cases in the US.



Source link

Continue Reading

Trending