DigiCert admits 16-month security lapse exposed customer data
Internal system exposed to internet since February 2025 following botched server migration
DigiCert has admitted that a botched server migration in February 2025 left an internal business system exposed to the public internet for more than 16 months, allowing an unauthorized user to access archived customer data including names, business addresses, and in some cases passports, driver's licenses and other identity documents.