VAST VIEW DigiCert Blunder Exposes Customer IDs and Business Data After Server Slip-Up
A botched server migration left an internal DigiCert system wide open to the internet, giving outsiders access to customer records and identity documents, the company confirms.
Photo by Schäferle via Pixabay
Digital security firm DigiCert has disclosed a data breach after a routine server migration went wrong and left an internal business system exposed to the open internet, according to BleepingComputer. The misconfiguration allowed unauthorized parties to access customer information along with sensitive identity documents.
DigiCert, which provides digital certificates and identity verification services used to secure websites and online transactions, said the exposure stemmed from human error during the migration process rather than a targeted attack, per BleepingComputer's reporting.
The incident is notable given DigiCert's role as a trusted backbone of internet security, issuing certificates that verify the identity of websites and protect encrypted connections across the web. Details on how many customers were affected or what specific documents were exposed were not fully outlined in the available reporting.
Sources: BleepingComputer
More from Cyber
SonicWall says it won't patch two newly disclosed vulnerabilities in its discontinued Global Management System software, leaving any still-running systems permanently exposed.
A federal grand jury has indicted two Canadian nationals accused of breaking into multiple US university computer systems and secretly using them to mine cryptocurrency.
The US cybersecurity agency warns federal agencies that a high-severity WordPress vulnerability is already being exploited in real-world attacks, just after a patch was released.