DigiCert security incident history
Hacking, data breaches and other security incidents involving DigiCert, with related coverage.
DigiCert internal systems breach exposes customer contacts and identity documents
Impact: Customer representatives’ contact details and some passports and driving licences exposed; number of affected customers undisclosed
An internal business system at DigiCert was exposed to the internet during a server migration, enabling an outsider to create an unauthorised account and view customer records. Confirmed unauthorised access took place from 27 June to 2 July, exposing customer representatives’ names, business contact details and business addresses, as well as some passports and driving licences. The company notified customers and said its certificate issuance services and customer login credentials were unaffected.
Related reports: 18 · last report →DigiCert support portal hack leads to certificate theft
Impact: Certificates stolen
DigiCert's support portal was hacked and certificates were stolen. DigiCert revoked the certificates following the incident. The Chinese-linked hacking group GoldenEyeDog was subsequently named as being behind the attack.
Related reports: 2 · last report →