DigiCert breach exposes archived customer data and identity documents
Original title: DigiCert data breach exposes customer information, identity documents
An unauthorized account read archived records from June 27 to July 2, 2026, after a 2025 migration left an internal system online.
DigiCert says a February 2025 server migration exposed an internal business system that had been reachable only by VPN. A self-registration feature and an authorization flaw let an external account read archived customer data. The company says certificate issuance, CertCentral, DigiCert ONE, login credentials, and issued certificates were not compromised. It has restricted the system, disabled self-registration, and begun notifying affected customers.
Unconfirmed: DigiCert has not said how many customers were affected and is still reviewing which identification documents were accessed.
- Exposed data included names, business emails, phone numbers, and business addresses.
- Some records also held driver’s licenses, passports, utility bills, or similar ID documents.
- DigiCert confirmed the access on October 19 after first seeing unauthorized accounts in June 2026.
- The account had read-only access and could not issue or approve certificates.
- How many people were affected is not stated; ID-document review is still underway.
Impact: Read-only access to archived customer PII and ID documents
- 1.Review DigiCert breach notices if you submitted identity documents for certificate validation.
- ATT&CK
- T1078 Valid Accounts
- Victims
- DigiCert
From the original article
2 min read at bleepingcomputer.com
DigiCert warns it suffered a data breach after a server migration mistakenly exposed an internal business system to the internet, allowing unauthorized access to customer information and identity documents. [...]
By Lawrence Abrams · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.