gcdRadar
live/Breaches & attacks/AIR-2026-1798
liveliveBreaches & attacks4 Confirmed real-world loss

DigiCert data breach exposes customer information and identity documents

DigiCert internal business system

DigiCert disclosed a data breach resulting from a server migration error that exposed an internal business system to the internet. Unauthorized individuals gained access to customer information and identity verification documents.

why this severityConfirmed real-world exposure of customer personal and identity documents.

affected
DigiCert internal business systems
first report
5 Nov 2026
last update
6 Nov 2026

What to do

Review communications from DigiCert if you are an affected customer and monitor for identity theft.

Timeline · 2

  1. 5 Nov 2026DigiCert data breach exposes customer information, identity documents
  2. 6 Nov 2026Attackers created an account on an internal system and accessed names, emails, phone numbers, and addresses

Sources · 3

News and write-ups

  1. 2026-11-05
    DigiCert data breach exposes customer information, identity documents
    BleepingComputer · bleepingcomputer.com/news/security/digicert-data-breach-exposes-customer-informa
  2. 2026-11-06
    DigiCert Data Breach Impacts Business Customer Information
    SecurityWeek · securityweek.com/digicert-data-breach-impacts-business-customer-information
  3. 2026-11-06
    Certificate authority DigiCert reports data breach involving business customer info
    The Record · therecord.media/digicert-certificate-authority-reports-data-breach

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
No AI role
categories
General security
severity
4 · Confirmed real-world loss
targets
Not applicable
owasp llm top 10
no entry for these categories
mitre atlas
no technique for these categories
dates
happened 5 Nov 2026 · first reported 5 Nov 2026
origin
News & research feeds
record
confidence 0.95 · created 2026-11-06 08:21Z · updated 2026-11-06 21:36Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# DigiCert data breach exposes customer information and identity documents

https://gcdradar.vercel.app/incidents/digicert-data-breach-exposes-customer-information-and-identi · AIR-2026-1798 · live

- Lane: Breaches & attacks
- Severity: 4 (Confirmed real-world loss): Confirmed real-world exposure of customer personal and identity documents.
- Fix status: No fix needed
- First reported: 2026-11-05
- AI role: No AI role
- Products: DigiCert internal business system

## Summary

DigiCert disclosed a data breach resulting from a server migration error that exposed an internal business system to the internet. Unauthorized individuals gained access to customer information and identity verification documents.

## What to do

Review communications from DigiCert if you are an affected customer and monitor for identity theft.

## Affected and fixed versions

- Affected: DigiCert internal business systems

## Latest updates

- 2026-11-06: Attackers created an account on an internal system and accessed names, emails, phone numbers, and addresses (https://securityweek.com/digicert-data-breach-impacts-business-customer-information)
- 2026-11-05: DigiCert data breach exposes customer information, identity documents (https://bleepingcomputer.com/news/security/digicert-data-breach-exposes-customer-information-identity-documents)

## Sources

- 2026-11-05 BleepingComputer: DigiCert data breach exposes customer information, identity documents https://bleepingcomputer.com/news/security/digicert-data-breach-exposes-customer-information-identity-documents
- 2026-11-06 SecurityWeek: DigiCert Data Breach Impacts Business Customer Information https://securityweek.com/digicert-data-breach-impacts-business-customer-information
- 2026-11-06 The Record: Certificate authority DigiCert reports data breach involving business customer info https://therecord.media/digicert-certificate-authority-reports-data-breach

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. live
  2. live8.6
    UnrealIRCd CVE-2026-114713: UnrealIRCd improper neutralization of delimiters vulnerability

    Patch now · Exploited · Partly patched · since 13 Nov 2026 · CVE-2026-114713

  3. live
  4. live
    University of Texas at Arlington discloses data breach from cyberattack

    Breaches & attacks · Exploited · since 13 Nov 2026

  5. live
  6. live