DigiCert Data Breach Exposes Customer Identity Documents

BankInfoSecurity reports that a botched system migration at DigiCert allowed unauthorized access to an internal customer archive. The article states that the sensitive data was exposed for more than a year.

The reported exposure involved customer identity documents held in the archive. The article's headline and summary attribute the incident to DigiCert's migration rather than to a separate intrusion.

Why it matters For security leaders, the case shows that data exposure can arise from a failed migration rather than an attack, so archives of retired or moved systems need access reviews as part of change management. Teams whose customers rely on DigiCert certificates or identity processes should check what DigiCert has disclosed about the data involved and assess their own exposure to identity documents held by third parties.