Now Hacked
EN-GB
Data breach

DigiCert internal systems breach exposes customer contacts and identity documents

First reported · Last reported · 18 related reports

An internal business system at DigiCert was exposed to the internet during a server migration, enabling an outsider to create an unauthorised account and view customer records. Confirmed unauthorised access took place from 27 June to 2 July, exposing customer representatives’ names, business contact details and business addresses, as well as some passports and driving licences. The company notified customers and said its certificate issuance services and customer login credentials were unaffected.

Key facts

Affected organisation
DigiCert
Incident type
Data breach
Occurred / detected
2026-06-27
Scale of damage
Customer representatives’ contact details and some passports and driving licences exposed; number of affected customers undisclosed
Cause / method
An outsider created an unauthorised account and accessed an internal system exposed by a security configuration error during a server migration
Location
United States

If your data was exposed

Exposed dataNamePhone numberEmailAddressID document copy

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.

Timeline

  1. Confirmed unauthorised access to the internal business system began.
  2. The confirmed period of unauthorised access ended.
  3. DigiCert disclosed the exposure of customer information and identity verification documents.
  4. A Korean-language notification to customers confirmed that names, business email addresses, telephone numbers and business addresses had been accessible.

18 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.