Digital security firm DigiCert has begun contacting customers to inform them of a data breach that may have exposed their personal data and certain identity documents.
“We are contacting you about a security event involving personal information associated with your personal information associated with your organisation’s business contacts,” the email, seen by Cyber Daily, says.
“The information involved was limited to names, business email addresses, phone numbers, and business address shared with DigiCert and, if provided, may have included an identification document such as driver’s license, passport, utility bill or other document with a name and address.”
The company said it was still reviewing the extent of the incident and the individuals impacted.
The incident, according to DigiCert’s incident report, stems from a February 2025 infrastructure migration that inadvertently exposed an internal registration endpoint to the internet. Unidentified attackers exploited the vulnerability to bypass multifactor authentication and gain read-only access to customer records between June 27 and July 2 2026.
The company confirmed the incident on October 19.
DigiCert has not disclosed the total number of affected customers, but described the compromised information as only a small portion of its archived customer data.
The company has since disabled self-registration, restricted access, and introduced additional security monitoring. The company stressed that its core certificate authority services, CertCentral and DigiCert ONE platforms, customer credentials, and issued certificates were not compromised.
“Access was limited to read-only access to archival information and did not provide an ability to perform or approve validations or request, approve, or issue certificates,” DigiCert said.
“The CA systems operate on their own secure network segments and were not affected by this external access. For confirmation, logs review of CA and validation activity found no validation actions, certificate issuance, or revocation activity associated with the associated account.”
Want to see more stories from trusted news sources?Make Cyber Daily a preferred news source on Google.
