Now Hacked
EN
Data breach

DigiCert internal systems breach exposes customer contacts and identity documents

First reported · Last reported · 18 related reports

An internal business system at DigiCert was exposed to the internet during a server migration, allowing an outsider to create an unauthorized account and view customer records. Confirmed unauthorized access occurred from June 27 to July 2, exposing customer representatives’ names, business contact details and business addresses, along with some passports and driver’s licenses. The company notified customers and said its certificate issuance services and customer login credentials were unaffected.

Key facts

Affected organization
DigiCert
Incident type
Data breach
Occurred / detected
2026-06-27
Scale of damage
Customer representatives’ contact details and some passports and driver’s licenses exposed; number of affected customers undisclosed
Cause / method
An outsider created an unauthorized account and accessed an internal system exposed by a security configuration error during a server migration
Location
United States

If your data was exposed

Exposed dataNamePhone numberEmailAddressID document copy

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.

Timeline

  1. Confirmed unauthorized access to the internal business system began.
  2. The confirmed period of unauthorized access ended.
  3. DigiCert disclosed the exposure of customer information and identity verification documents.
  4. A Korean-language notification to customers confirmed that names, business email addresses, phone numbers and business addresses had been accessible.

18 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.