Breaches · 4h ago
DigiCert says a server migration mistakenly left an internal business system reachable from the public internet, allowing unauthorized access to customer information and identity documents.
The system was meant for internal use, but the migration made it accessible to outsiders. The reported exposure resulted from that misplaced access boundary; the reporting does not establish a compromise of DigiCert’s certificate services.
For customers whose records were held in the system, the concern is potential misuse of their information and identity documents. DigiCert’s role in certificate trust does not make this evidence that certificate issuance or customers’ cryptographic keys were compromised.
3 sources covering this story
DigiCert Data Breach Impacts Business Customer Information
Hackers created an account on an internal system and accessed names, email addresses, phone numbers, and business addresses.
DigiCert admits 16-month security lapse exposed customer information
Botched server move left the door open, and DigiCert took months to notice someone had wandered in
DigiCert data breach exposes customer information, identity documents
DigiCert warns it suffered a data breach after a server migration mistakenly exposed an internal business system to the internet, allowing unauthorized access to customer information and identity documents.
Part of the PlainSec briefing for 2026-11-06