CybersecurityUpdated November 6

DigiCert’s migration exposed customer data.

Over the summer, a server migration left a DigiCert internal business system reachable from the internet when it wasn’t meant to be, The Record reports. The same report says someone created an unauthorized account. SecurityWeek reports that hackers created an account on an internal system and accessed business customers’ names, email addresses, phone numbers and business addresses. BleepingComputer also reports unauthorized access to customer information and identity documents. So this wasn’t only a matter of contact details being exposed: BleepingComputer says identity documents were in the breach too.

3 publishers3 reports

Coverage started November 5