DigiCert Says Breach Exposed Business Customer Information

Summary

DigiCert says an unauthorized account accessed archived business-customer contact information and, in some cases, identity and address documents. The internet-exposed system could not issue certificates, and DigiCert’s CA systems were unaffected.

Key points

• An internal business system used to archive customer information was inadvertently exposed to the internet after being moved to another network segment in February 2025.
• Attackers reportedly used a self-registration feature that did not require MFA to create a read-only account.
• The account accessed archived data between June 27 and July 2; DigiCert blocked it on July 2 and determined in October that customer information had been accessed.
• Affected information included names, email addresses, phone numbers and business addresses; some customers’ driver’s licenses, passports, utility bills or other name-and-address documents were also accessed.
• DigiCert said the account could not modify records, approve validations or issue certificates, and that its certificate-authority systems were not affected.
• DigiCert says it added monitoring and alerts, removed remaining non-DigiCert accounts, reset business-system user passwords and disabled self-registration.
• DigiCert did not disclose how many customers may have been affected.

Vendors

Related Articles

• DigiCert Confirms Unauthorized Access to Archived Customer Recordssecurityonline.infoDigiCert
• DigiCert Confirms Unauthorized Access to Archived Customer Datableepingcomputer.comDigiCert
• BlackCrypt Malware Uses Signed RMM Agent to Hide Phishing Luresrogueauthority.orgDigiCert
• Microsoft Expands Testing for Post-Quantum Certificate Authenticationmicrosoft.comDigiCert