DigiCert Data Breach Impacts Business Customer Information

DigiCert experienced a data breach where attackers exploited a self-registration feature to create a unauthorized read-only account on an internal business system. This account accessed archived business customer contact information, including names, email addresses, phone numbers, business addresses, and in some cases, sensitive documents such as driver's licenses and passports. The breach occurred between June 27 and July 2, 2026, and was discovered and blocked on July 2. The compromised system was separate from DigiCert's certificate authority systems, which were not affected. DigiCert has since disabled the self-registration feature, reset passwords, and enhanced monitoring and permission enforcement.

• securityweek.com/digicert-data-breach-impacts-business-customer-information/ (opens in a new tab)