{
  "id": 18509577,
  "title": "DigiCert admits 16-month security lapse exposed customer information",
  "url": "https://urgent.news/2026/11/06/digicert-admits-16-month-security-lapse-exposed-customer-information-18509577",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-06T13:15:00.000Z",
  "source": {
    "name": "The Register",
    "slug": "the-register",
    "url": "https://www.theregister.com/security/2026/11/06/digicert-admits-16-month-security-lapse-exposed-customer-information/5308097"
  },
  "original_language": "en",
  "account": "DigiCert has admitted that a security lapse exposed customer information for over 16 months. The incident occurred after a botched server migration in February 2025, which left an internal system exposed to the internet. An unauthorized user gained access to customer data, including passports, driver's licenses, and other identification documents. DigiCert confirmed the compromised information, but has not disclosed the number of affected individuals. The company began investigating the breach on October 19, after an unauthorized account accessed a subset of archived records between June 27 and July 2. DigiCert has since tightened network access and added monitoring to prevent future incidents.",
  "summary": "Botched server move left the door open, and DigiCert took months to notice someone had wandered in",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}