DigiCert has disclosed a data breach involving an internal business system that stored customer contact information and identity documents This article explores digicert support breach. . Unauthorised access exposed archived data, including names, business email addresses, phone numbers, and business addresses.
A small percentage of affected customer accounts also contained passports, driver’s licenses, utility bills, or other documents showing names and addresses. DigiCert assured that customer login credentials and issued certificates remained secure.
Troy Hunt forwarded DigiCert's announcement on X, asking, "Anyone else received one of these from @digicert?" The email indicated DigiCert was reviewing identity documents to identify affected individuals and would notify them once the review was complete. The incident started on February 4, 2025, as DigiCert moved its business system from a restricted network segment to another availability zone.
A web application firewall blocked new registrations through the external access path, but existing access remained a concern.
Retained logs and audit records played a crucial role in reconstructing the access window and linking activity to the account. DigiCert subsequently disabled self-registration, moved remaining exposed endpoints behind private network infrastructure, reset business system passwords, and strengthened monitoring. It differs from the earlier DigiCert support system breach involving code-signing certificates and the 2024 DNS validation error that necessitated certificate replacements.
DigiCert’s stated lesson is clear: internal tools must undergo explicit authorization checks, regardless of network restrictions.
