DigiCert Data Breach Exposes Enterprise Customer Details and Identity Documents
What Happened — DigiCert, a global Certificate Authority, disclosed a breach that exposed personal and identity data belonging to thousands of enterprise customers. The intrusion was discovered in early November 2026 and appears to have stemmed from compromised privileged credentials within DigiCert’s internal management platform. Attackers accessed a repository containing customer‑issued certificates, contact information, and scanned identity documents. DigiCert is notifying affected organizations, working with forensic investigators, and has begun remediation steps, including credential rotation and enhanced monitoring.
Why It Matters for Trust & Control Assurance — The incident highlights the need for rigorous third‑party risk oversight and continuous evidence of vendor security controls.
Who Is Affected — Certificate authorities, enterprises that rely on DigiCert for TLS/PKI services, SaaS providers, and any organization whose employees’ identity documents were stored by DigiCert.
Recommended Actions —
- Review and update your third‑party risk management program to include evidence of vendor access‑control and credential‑management practices.
- Request and validate recent audit artifacts (SOC 2, ISO 27001, or equivalent) from DigiCert that demonstrate controls over privileged accounts and data protection.
- Conduct a focused impact assessment on any internal systems that trust DigiCert‑issued certificates.
Technical Notes — The breach appears to involve compromised privileged credentials and unauthorized read access to a customer‑data store. No public CVE is associated; the vector is a credential‑theft scenario rather than a software flaw. Source: https://www.digicert.com/news/data-breach