DigiCert security incident history
Hacking, data breaches and other security incidents involving DigiCert, with related coverage.
DigiCert internal systems breach exposes customer contacts and identity documents
Impact: Customer representatives’ contact details and some passports and driver’s licenses exposed; number of affected customers undisclosed
An internal business system at DigiCert was exposed to the internet during a server migration, allowing an outsider to create an unauthorized account and view customer records. Confirmed unauthorized access occurred from June 27 to July 2, exposing customer representatives’ names, business contact details and business addresses, along with some passports and driver’s licenses. The company notified customers and said its certificate issuance services and customer login credentials were unaffected.
Related reports: 18 · last report →DigiCert support portal hack leads to certificate theft
Impact: Certificates stolen
DigiCert's support portal was hacked and certificates were stolen. DigiCert revoked the certificates after the incident. The Chinese-linked hacking group GoldenEyeDog was later named as being behind the attack.
Related reports: 2 · last report →