Security · High impactFan score 48 · Tier B4 sources1 comments in the community
Certificate authority DigiCert reports data breach involving business customer info
The Brief
- DigiCert says an internal business system was made externally accessible by mistake, and an unauthorized account was created on it.
- Accessed data includes names, email addresses, phone numbers and business addresses of business customers.
- BleepingComputer and The Register report that identity documents such as passports and driver's licenses were also exposed.
Why it matters
Developers at organizations with DigiCert accounts may face targeted phishing that uses the exposed contact details, so unexpected messages about their DigiCert account deserve caution.
Who’s affected
- DigiCert business customers
- #data-breach
- #certificate-authority
- #digicert
- #customer-data
- #security
DigiCert explained that over the summer, an internal business system was "externally accessible when that was not intended," and someone had created an unauthorized account.
What developers are saying
Based on 1 comments · Mostly critical
The single commenter says they had not considered this advantage of Let's Encrypt when they moved away from DigiCert. Their reaction to the breach is surprise, with no other views given.
- Reconsidering DigiCert after breach100%
- Let's Encrypt as alternative100%
- Surprise at the breach100%
In favour
Concerns
- − Breach is a reason to reconsider DigiCert
“I actually didn't consider this advantage when I switched from Digicert to LetsEncrypt.”
“Wow.”
Timeline
DigiCert discloses data breach caused by exposed internal business system
BleepingComputer
DigiCert data breach exposes customer information, identity documents
www.theregister.com - Articles
DigiCert admits 16-month security lapse exposed customer information
SecurityWeek
DigiCert Data Breach Impacts Business Customer Information
The Record from Recorded Future News
Certificate authority DigiCert reports data breach involving business customer info
Hacker News
4 points · 1 comments
Full coverage · 4 sources
- 7h ago ↗
The Record from Recorded Future News
Certificate authority DigiCert reports data breach involving business customer info
- 12h ago ↗
- 13h ago ↗
www.theregister.com - Articles
DigiCert admits 16-month security lapse exposed customer information - 1d ago ↗