DigiCert data breach exposes customer information, identity documents

DigiCert disclosed a data breach after a server migration accidentally exposed an internal system with a self-registration feature; an authorization flaw let unauthorized accounts read archived customer records (names, business contact data, and in some cases identity documents) for a limited period in mid-2026 while core certificate services and issued credentials remained unaffected.