DigiCert has confirmed a data breach affecting its business customers’ contact details. An internal business system utilized for archiving customer data was shifted to a different network segment in February last year. Hackers took advantage of a self-registration facility in the system’s account manager existing for other purposes. For your information the facility did not need MFA. The hackers created a read-only account that had access to archived information between June 27 and July 2.

The organization blocked the unauthorized account on July 2. In October it was found that the account was utilized to access archived customer contact details such as names, email addresses, phone numbers as well as business addresses. In certain instances, driver’s licenses, passports, utility details and miscellaneous documents having a name and address given by customers were also leaked.

DigiCert stated “The access could not write records, act as a validation approver, or issue certificates.” “The CA systems operate on their own secure network segments and were not affected by this external access.”

From mid-October, the organization also implemented additional monitoring and alerting, verified or removed remaining non-DigiCert accounts, reset passwords for all business system users, deactivated the feature that enabled users to self-register, and verified the ownership of the business system and the enforcement of permission policies.

SOURCES:-

https://www.securityweek.com/digicert-data-breach-impacts-business-customer-information/’

https://therecord.media/digicert-certificate-authority-reports-data-breach

https://www.theregister.com/security/2026/11/06/digicert-admits-16-month-security-lapse-exposed-customer-information/5308097

https://cybersecuritynews.com/digicert-confirms-data-breach/#google_vignette

https://aviatrix.ai/threat-research-center/digicert-data-breach-exposes-customer-information-identity-documents/