DigiCert has begun contacting customers after an internal system exposed archived customer records, including business contact details and, in a small minority of cases, identity documents. The company is still reviewing the documents to identify affected individuals and has not disclosed how many customers or people are involved.
The Register and Cyber Daily reported on November 6 that DigiCert has started sending customer notifications. The email says the information may include names, business email addresses, phone numbers and business addresses. Some records may also contain a customer-provided driver’s license, passport, utility bill or another document showing a name and address. DigiCert said it will notify individuals after completing its review of the identity documents.
The notices follow DigiCert’s earlier confirmation of unauthorized access to archived records, detailed in Abijita’s initial report on the breach. In its incident report filed with Mozilla, the company said a February 4, 2025 infrastructure migration moved an internal business system from a VPN-restricted network segment to an externally accessible availability zone. A self-registration feature intended for other applications became available on the system, allowing outside users to create accounts without the multifactor authentication required for employees. A separate authorization flaw allowed those accounts to read archived records.
DigiCert said an unauthorized account accessed a subset of archived records between June 27 and July 2, 2026. The company described the affected data as a small proportion of its archive but has not published a total count. It said the account had read-only access and could not modify records, approve validations or issue certificates. DigiCert’s certificate authority services, CertCentral and DigiCert ONE were not affected, and the company found no related certificate issuance, validation or revocation activity. Customer credentials and issued certificates also remain secure, according to the company.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
