DigiCert Breach Exposes Customer Data and Identity Documents

· Cybersecurity · United States

DigiCert warned that it suffered a data breach after a server migration mistakenly exposed an internal business system to the internet, allowing unauthorized access to customer information and identity documents. The certificate authority, which issues TLS and other digital certificates relied on across the web, said the exposure stemmed from the migration error rather than a sophisticated intrusion. Details on the number of affected customers were not provided in the report. Because certificate authorities hold identity verification records for organizations and individuals, a leak of identity documents raises the risk of impersonation and follow-on fraud against the customers involved.

Why it matters：Certificate authorities sit at the root of trust for encrypted web traffic, so leaks of their customer identity records can enable impersonation and undermine confidence in certificate issuance.

Key points

  • A server migration exposed an internal business system to the internet
  • Customer information and identity documents were accessed without authorization
  • DigiCert is a major issuer of TLS and other digital certificates

Sources (original reporting)

More stories from this day