DigiCert migration exposed customer records and identity documents
DigiCert says a server migration mistakenly left an internal business system reachable from the public internet, allowing unauthorized access to customer information and identity documents.
The system was meant for internal use, but the migration made it accessible to outsiders. The reported exposure resulted from that misplaced access boundary; the reporting does not establish a compromise of DigiCert’s certificate services.
For customers whose records were held in the system, the concern is potential misuse of their information and identity documents. DigiCert’s role in certificate trust does not make this evidence that certificate issuance or customers’ cryptographic keys were compromised.
DigiCert data breach exposes customer information, identity documents
DigiCert warns it suffered a data breach after a server migration mistakenly exposed an internal business system to the internet, allowing unauthorized access to customer information and identity documents.