DigiCert Data Breach Exposes Customer Personal Info
Original title: Certificate authority DigiCert reports data breach involving business customer info
DigiCert's exposed internal system was accessed from June 2026, exposing names, emails, and IDs but not enabling cert issuance.
DigiCert reported a data breach after an internal business system was exposed externally starting June 21, 2026. The database was accessed on June 27, containing customer names, business emails, phone numbers, and documents like driver's licenses and passports. The incident was reportable under Mozilla, Google, Microsoft, and Apple rules but did not affect certificate services or login credentials. The company fixed the exposure by July 2 after detection on October 19.
Unconfirmed: Number of impacted customers unknown
- Internal system exposed externally from June 21
- Accessed database on June 27 with personal customer data
- Could not issue certificates or steal credentials
- Reportable to Mozilla, Google, Microsoft, Apple
- Fixed by July 2; treated as infrastructure change
Impact: Access to customer names, emails, IDs, and documents
- 1.Report incident to browser vendors
- 2.Enhance security reviews for infrastructure changes
From the original article
2 min read at therecord.mediaDigiCert explained that over the summer, an internal business system was "externally accessible when that was not intended," and someone had created an unauthorized account.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.