DigiCert support portal hack leads to certificate theft
DigiCert's support portal was hacked and certificates were stolen. DigiCert revoked the certificates following the incident. The Chinese-linked hacking group GoldenEyeDog was subsequently named as being behind the attack.
Key facts
- Affected organisation
- DigiCert
- Incident type
- Hacking & intrusion
- Occurred / detected
- Not confirmed
- Scale of damage
- Certificates stolen
- Cause / method
- Hack of support portal
- Location
- United States
Timeline
- DigiCert revoked certificates following the hack of its support portal.
- The Chinese-linked hacking group GoldenEyeDog was named as being behind the certificate theft.
2 related reports
Other incidents at DigiCert
DigiCert internal systems breach exposes customer contacts and identity documents
Impact: Customer representatives’ contact details and some passports and driving licences exposed; number of affected customers undisclosed
An internal business system at DigiCert was exposed to the internet during a server migration, enabling an outsider to create an unauthorised account and view customer records. Confirmed unauthorised access took place from 27 June to 2 July, exposing customer representatives’ names, business contact details and business addresses, as well as some passports and driving licences. The company notified customers and said its certificate issuance services and customer login credentials were unaffected.
Related reports: 18 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.