Security · High impactFan score 48 · Tier B3 sources
DigiCert admits 16-month security lapse exposed customer information
The Register · By Carly Page ·
The Brief
- DigiCert says an unauthorized user accessed customer data through an internal system.
- The Register reports a botched server migration left the system exposed to the internet for more than a year (16 months).
- SecurityWeek reports names, email addresses, phone numbers and business addresses were accessed; The Register reports passports, driver's licenses and other identity documents were also exposed.
Why it matters
Exposed contact details and identity documents can be used for targeted phishing and identity fraud against people and businesses tied to DigiCert accounts.
Who’s affected
- DigiCert business customers
- #security
- #data-breach
- #certificate-authority
- #digicert
- #identity-data
DigiCert has admitted that a botched server migration left an internal system exposed to the internet for more than a year, allowing an unauthorized user to access customer data, including passports, driver's licenses, and other identity documents. The certificate authority has…
Timeline
BleepingComputer
DigiCert data breach exposes customer information, identity documents
DigiCert admits the internal system was exposed to the internet for 16 months and customer data was accessed
www.theregister.com - Articles
DigiCert admits 16-month security lapse exposed customer information
SecurityWeek
DigiCert Data Breach Impacts Business Customer Information