Companies House Suspends Web Filing

[agentzero]

https://www.ft.com/content/afddb9c3-...2-61ae8acc44b8

Companies House has suspended their Web Filing service, due to fraudulent activity. It is a good idea to check your details are accurate, as many businesses are affected. The details of the hack haven't been shown, it most likely involves using malformed data requests to update records using false data.

I think they will suspend ID verification soon until this "bug" is fixed. Sounds like more than a bug, sounds like some people need sacked.

[eek]

Details including the bug can also be seen here

https://x.com/DanNeidle/status/2032506756786511908

To say this is incompetent development and testing would be a slight understatement.

[cojak]

Just see it on BlueSky https://forums.contractoruk.com/gene...-for-this.html

HAHAHAHAHA!

[sadkingbilly]

Crapita??
just askin'

[agentzero]

Details including the bug can also be seen here

https://xcancel.com/DanNeidle/status...06756786511908

To say this is incompetent development and testing would be a slight understatement.

If you want to avoid supporting that hellhole website, change x to xcancel in the URL:

Makes browsing much easier https://xcancel.com/DanNeidle/status...06756786511908

[willendure]

Are they suspending the stupid new ID thing too?

[PerfectStorm]

Noticed when looking at mine that the 'Home Address' is my actual home and different from the 'Correspondence Address'. Seen some online guides suggesting making Home the same as Correspondence - wished I had...

[Mephisto]

Crapita??
just askin'

Funnily enough, first thing I thought of too

[Contreras]

Re-posting these from an earlier thread (disable javascript to bypass paywall)

CW: Government faces claims of serious security and data protection problems in One Login digital ID

The Government Digital Service was warned about serious cyber security and data protection problems in its flagship digital identity system, with insider claims that the data of three million users may still be at risk

CW: Gov.uk One Login yet to meet government cyber security standards for critical public services

The government’s flagship digital identity system still does not fully conform to key national security standards three years after launch, while questions remain over whether historic security problems have been resolved

CW: Gov.uk One Login loses certification for digital identity trust framework

The government’s flagship digital identity system has lost its certification against the government’s own digital identity system trust framework

CW: Security tests reveal serious vulnerability in government’s One Login digital ID system

A ‘red teaming’ exercise to simulate cyber attacks on the government’s flagship digital identity system has found that One Login can be compromised without detection

Telegraph: Britain’s primary data portal just failed a red-team test. Yes, that is very bad

If this problem is not sorted out, the risk of a national disaster is very real

Accounting Web: Is Companies House prudent?

Companies House is relying on GOV.UK One Login, which is unreliable

[PerfectStorm]

What penalties will Companies House suffer for leaking our data in this way? As with the Parasol/Nixon Williams hack, the response will be a strongly worded letter...