DigiCert says it has suffered a data breach after an internal system became reachable from the internet and an unauthorized account was created, enabling access to customer information. The company explains that over the summer a business system was externally accessible when it was not intended.
Outlet reports describe how attackers or unauthorized users set up an account on the internal system and accessed customer-related data. SecurityWeek says the accessed information includes names, email addresses, phone numbers, and business addresses. Bleeping Computer adds that DigiCert warns identity documents were also exposed, linking the incident to a server migration that mistakenly exposed the internal system to the internet.
Across coverage, The Record and SecurityWeek emphasize the externally accessible internal system and the creation of an unauthorized account, while Bleeping Computer highlights the migration-related cause and broader categories of data. All accounts treat the incident as a lapse in exposure controls rather than a specific public-facing product compromise.
