UK’s Companies House confirms security flaw exposed business data