DigiCert confirms data breach exposing customer details and archived identity files

DigiCert has confirmed a data breach exposing customer personal information and archived data, according to CyberSecurityNews, GBHackers News, Cyber Press, and shattered.io. SecurityWeek reported that unauthorized actors abused a self-registration feature in an account manager system to create a read-only account. The feature was designed for other purposes and did not require multi-factor authentication. [1][2][7][8][9]

SecurityWeek reported that the unauthorized account accessed archived data between June 27 and July 2. DigiCert blocked the account on July 2 and determined in October that the account had accessed the stored information. The compromised records include customer names, email addresses, phone numbers, and business addresses. [2]

CyberSecurityNews, GBHackers News, Cyber Press, and shattered.io reported that the exposed records also included sensitive identity documents, such as passports and identification cards. Transport Layer Security is a cryptographic protocol designed to provide secured communications over a computer network, including securing HTTPS connections. Rescana noted that organizations can prepare for the incident without needing to reissue certificates. [1][7][8][9][10][11][12]

The incident follows similar exposure events involving customer contact information at other organizations. As FTMQ Security reported earlier, blockchain analytics firm Chainalysis disclosed a security breach in October 2026 where an intruder accessed client names, user IDs, email addresses, and employee roles. [14]