DigiCert admits 16-month security lapse exposed customer information
Botched server move left the door open, and DigiCert took months to notice someone had wandered in
DigiCert has admitted that a security lapse exposed customer information for over 16 months. The incident occurred after a botched server migration in February 2025, which left an internal system exposed to the internet. An unauthorized user gained access to customer data, including passports, driver's licenses, and other identification documents.
DigiCert confirmed the compromised information, but has not disclosed the number of affected individuals. The company began investigating the breach on October 19, after an unauthorized account accessed a subset of archived records between June 27 and July 2. DigiCert has since tightened network access and added monitoring to prevent future incidents.
Written by urgent.news from The Register's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
