DigiCert Data Breach Exposes Customer Information and Identity Documents
Internal system exposed during server migration, potentially compromising sensitive data
Key Takeaways
- DigiCert confirmed a data breach due to a server migration misconfiguration.
- An internal business system was exposed to the internet, allowing unauthorized access.
- Customer information and identity documents were potentially compromised.
- DigiCert applied system reconfiguration and access restrictions as a mitigation measure.
- The scope and exact number of affected individuals are pending official disclosure.
Quick answers
- What happened?
- DigiCert confirmed a data breach resulting from a server migration that inadvertently exposed an internal business system to the internet. The misconfiguration allowed unauthorized access to customer information and identity documents. The company has applied system reconfiguration and access restrictions to mitigate the issue.
- What should defenders do?
- DigiCert has applied system reconfiguration and access restrictions following the discovery of the misconfiguration. Affected customers are advised to monitor accounts for unusual activity and follow any official communications from DigiCert regarding the incident.
DigiCert has warned of a data breach stemming from a server migration error that mistakenly exposed an internal business system to the internet. According to reports, the misconfiguration allowed unauthorized access to customer information and identity documents. The company stated that following the discovery of the exposure, system reconfiguration and access restrictions were applied to resolve the issue. The full extent of the data exposed, including the number of affected customers and specific data types, remains under official disclosure. The incident highlights the risks associated with cloud and server migrations when access controls are not properly validated.
Security Details
The breach resulted from a server migration that inadvertently exposed an internal business system to the internet. No specific exploit details have been reported; the exposure was due to a misconfiguration. DigiCert has applied access restrictions and system reconfiguration to address the issue.
Mitigation
DigiCert has applied system reconfiguration and access restrictions following the discovery of the misconfiguration. Affected customers are advised to monitor accounts for unusual activity and follow any official communications from DigiCert regarding the incident.
Sources
BleepingComputer
DigiCert data breach exposes customer information, identity documents
Nov 5, 2026 · 16:12
Original link
Related Security News
mSecure Password Manager Security Incident Prompts User Warnings
mSeven Software has warned current and former mSecure password manager customers to change passwords, reset two-factor authentication, and remove passkeys following a cyberattack that reportedly exposed an encrypted customer database. The incident underscores ongoing risks for password management platforms.
DreamHost Confirms Data Breach Exposing FTP and Webmail Credentials
DreamHost has confirmed a data breach in which attackers gained unauthorized access to the company's File Manager platform for approximately two months. During this time, customers' FTP and SFTP usernames and passwords were stolen, and webmail sessions were exposed. The breach was disclosed on November 4, 2026.
