DigiCert data breach exposes customer information, identity documents

DigiCert warns it suffered a data breach after a server migration mistakenly exposed an internal business system to the internet, allowing unauthorized access to customer information and identity documents.

The certificate authority says the breach affected a small portion of its archived customer data, including names, business email addresses, phone numbers, and business addresses.

For some people, the exposed records also contained personal identification documents, such as driver's licenses, passports, and utility bills.

DigiCert has begun sending data breach notifications to affected customers, with cloud architect Fabian Bader sharing a copy of the notification on X.

"Thanks @digicert that your data leak was 'limited' to only my full PII data and potentially any verification documents I submitted for my certificate," Bader wrote.