DigiCert confirms breach exposing archived customer contact details and identity documents
BREACHDigiCertredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
DigiCert confirmed unauthorised access to an internal business system holding archived customer data, including names, business contact details and, for a small minority of accounts, passports, driver's licences and utility bills. The exposure stemmed from a February 2025 migration that made the system internet-reachable, plus an account registration feature not covered by MFA that gave read-only access to archived records between 27 June and 2 July 2026. DigiCert says its CA services, CertCentral and DigiCert ONE were unaffected and no certificate issuance or revocation activity was linked to the access.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Customers do not need to replace active certificates because of this incident.
- Watch for a notification from DigiCert, which says it will contact affected individuals once its review of identity documents is complete.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Cyber Security News
Who and what is in it
Companies
Products