DigiCert breach exposed customer data and some identity documents
A server migration mistakenly exposed an internal system to the internet, the certificate authority says.
Leaked on 05 November 2026

Certificate authority DigiCert says a server migration mistakenly exposed an internal business system to the internet, allowing unauthorized access to customer information, BleepingComputer (@BleepinComputer) reported on November 5.
The exposed data included names, business email addresses, phone numbers and business addresses, and for some people identity documents such as driver's licenses, passports and utility bills, according to BleepingComputer. DigiCert has started notifying affected customers.
DigiCert notified customers of the breach.