DigiCert data breach exposes customer information and identity documents
BREACHDigiCertredteam/daily · 2 sources
- Severity
- High
- Sources
- 2
What happened
DigiCert warns that a server migration mistakenly exposed an internal business system to the internet, enabling unauthorised access to customer information and identity documents. No CVE, affected software versions or exploitation details are given in the available text. Defenders should check whether they hold DigiCert accounts or submitted identity documents to the company, and should watch for follow-on phishing or impersonation that uses the exposed data.
For security analysts · Written by AI from 2 sources · Wrong?
What to do
- Check whether your organisation or staff have a DigiCert account or submitted identity documents to the company.
- Be cautious of unexpected emails or calls that refer to DigiCert or your certificate orders, as exposed contact details could be used in phishing.
Written by AI from the sources, checked against them
Full story timeline · 2 updates
Who reported · 2 outlets
GBHackersBleepingComputer
Who and what is in it
Companies