Comment by sarusso

"Our investigation found that it was technically possible for a logged-in registered user to:

1. See certain data not normally published on the public register:

- the day of the date of birth for directors and PSCs

- residential address for directors and PSCs

- company registered email address

2. File updates to any information without consent. For example, new accounts or changes of director."