Security AlertHigh
DigiCert says server migration exposed customer data and ID documents
Nov 5, 2026 · Summarized by Fundy Tech from 2 sources
The 30-second version
DigiCert says a server migration exposed an internal system to the internet and allowed access to archived customer data. Some records included ID documents like passports and licences.
Key points
- The exposed data included names, emails, phone numbers and business addresses.
- Some records also included driver’s licences, passports and utility bills.
- DigiCert says the issue came from a February 2025 migration.
- The company confirmed unauthorized access between June 27 and July 2, 2026.
Why it matters
Customers may need to watch for identity theft or fraud if their records were exposed. Businesses that use certificate services should take notice of how a migration mistake can turn into a data breach.
Who’s affected: Some DigiCert customers and their identity documents
What to do
- Watch for DigiCert breach notices.
- Review accounts for unusual activity.
- Be cautious with emails asking for identity or payment details.
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.