# DigiCert notifies customers of breach exposing identity records

_Published Thursday, November 5, 2026 at 11:36 AM EST · Security · Latest · Tier 2 — Notable_

![DigiCert notifies customers of breach exposing identity records — Primary](https://www.bleepstatic.com/content/hl-images/2026/11/05/digicert-header.jpg)

DigiCert has begun notifying customers that unauthorized access to an internal business system exposed archived contact information and, for some people, identification documents. The certificate authority says the affected records included names, business email addresses, phone numbers and business addresses; some also contained passports, driver's licenses or utility bills.

A February 2025 migration exposed the system to the internet. Self-registration and an authorization flaw allowed outsiders to access archived records. DigiCert confirmed on October 19 that an unauthorized account accessed customer information between June 27 and July 2, 2026. Its review of identification documents continues. DigiCert says the access could not modify records, approve validations or issue certificates.

## Sources

- [BleepingComputer](https://www.bleepingcomputer.com/news/security/digicert-data-breach-exposes-customer-information-identity-documents/)

---
Canonical: https://techandbusiness.org/newswire/q0hFRXIq-RibNOcCXlyy1T
Published: 2026-11-05T16:36:03.903Z
Story chronology: 2026-11-05T16:12:46.000Z
Retrieved: 2026-11-06T22:54:16.581Z
Publisher: Tech & Business (techandbusiness.org)