Excerpt from BleepingComputer, Published on November 3, 2026
The DigiCert data breach has raised cybersecurity concerns after the digital certificate provider disclosed unauthorised access to an internal business system, exposing archived customer information and sensitive identity documents. The incident stemmed from a server migration error that inadvertently made an internally restricted system accessible through the internet, raising concerns about the security of customer verification records.
The DigiCert data breach originated in February 2025, when a server migration mistakenly exposed an internal business system that was previously accessible only through a virtual private network (VPN). The exposed system contained a self-registration feature that allowed external users to create accounts. Due to an authorisation flaw, these accounts gained read-only access to archived customer information despite not being assigned to specific applications.
DigiCert discovered unauthorised accounts on the exposed system in June 2026 but initially believed they could not access customer records. A subsequent investigation confirmed that an unauthorised account had accessed archived information between June 27 and July 2, 2026. The company confirmed the data exposure on October 19. The compromised information included customer names, business email addresses, phone numbers, and business addresses.
Some records also contained sensitive identity documents, including passports, driver’s licences, and utility bills submitted during customer verification. DigiCert has not disclosed the exact number of affected individuals and described the compromised records as a small portion of its archived customer data.
Following the discovery, DigiCert restricted access to the affected system, disabled self-registration, and introduced additional security controls. The company confirmed that its certificate authority services, CertCentral, and DigiCert ONE platforms remained unaffected. Customer login credentials and issued certificates were also not compromised.
For additional information, read the full report from BleepingComputer.
