DigiCert data breach — misconfigured server exposed customer data and identity documents
Severity: medium · Patch status: no-fix-needed · Since 2026-11-06
Certificate authority DigiCert warned customers of a data breach caused by a server migration that mistakenly exposed an internal business system to the internet, allowing unauthorized access. The breach affected a small portion of DigiCert's archived customer data, including names, business email addresses, phone numbers, and identity documents. The exposure stemmed from a configuration error rather than a software vulnerability, so no patch applies; remediation involves securing the misconfigured system. Customers whose archived data was included may face phishing or identity-theft risk from the exposed identity documents. DigiCert is notifying affected customers.
What to do
- Watch for phishing emails referencing DigiCert or certificate services and verify sender authenticity
- If notified by DigiCert, review what personal data was exposed and consider identity-document misuse monitoring
- Review and tighten certificate-account credentials and enable MFA on DigiCert accounts
- Be alert to social engineering attempts impersonating DigiCert support using exposed contact details
Sources
All live incidents on Threat Watch
