DigiCert breach exposes business customer contact data
Original title: DigiCert Data Breach Impacts Business Customer Information
An exposed archive system let an attacker use a self-registered read-only account from June 27 to July 2; certificate systems were unaffected.
DigiCert said an internal archive of business-customer information was moved to another network segment in February 2025 and inadvertently exposed to the internet. Attackers used a self-registration feature without MFA to create a read-only account and access archived contacts between June 27 and July 2. DigiCert blocked the account on July 2 and later found names, emails, phone numbers, business addresses and, in some cases, identity documents. It says the account could not write records, approve validation or issue certificates.
Unconfirmed: DigiCert has not disclosed how many customers were affected.
- DigiCert began suspecting archived-data access on October 12.
- It later disabled self-registration, reset business-system passwords and removed non-DigiCert accounts.
- The company has not said how many customers were affected.
- CA systems on separate network segments were not affected.
Impact: Customer contacts and some identity documents were accessed
| Product | Affected |
|---|---|
| DigiCert business customer archive system | — |
- Vendors
- DigiCert
From the original article
1 min read at securityweek.com
Hackers created an account on an internal system and accessed names, email addresses, phone numbers, and business addresses. The post DigiCert Data Breach Impacts Business Customer Information appeared first on SecurityWeek.
By Ionut Arghire · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.