DigiCert confirms data breach from misconfiguration
Original title: DigiCert Confirms Data Breach After Security Misconfiguration Exposes Customer Personal Information
DigiCert confirmed unauthorized access to archived customer data after an infrastructure migration exposed a self-service registration endpoint.
DigiCert confirmed unauthorized access to an internal system containing archived customer information due to a security misconfiguration. The exposure originated from a migration on February 4, 2025, moving the system to an externally accessible zone. The incident affected business contact details and, in some cases, identity documents. The breach was discovered on June 18, 2026, and confirmed on October 19, 2026. No certificate services were affected. Remediation included disabling self-registration and adding monitoring.
Unconfirmed: Exact number of affected customers not disclosed
- Unauthorized access occurred between June 27 and July 2, 2026
- Affected data includes names, emails, addresses, and some identity documents
- Patch deployed on July 2, 2026
- Final auditing scheduled for November 6, 2026
Impact: exposure of customer personal information
- Vendors
- DigiCert
- Products
- internal business system
From the original article
2 min read at gbhackers.com
DigiCert confirmed unauthorized access to an internal business system containing archived customer information due to a security misconfiguration that exposed the application to the internet. This incident affected business contact details and, in some cases, identity documents.
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.