DigiCert admits 16-month security lapse exposed customer information

DigiCert has admitted that a botched server migration left an internal system exposed to the internet for more than a year, allowing an unauthorized user to access customer data, including passports, driver's licenses, and other identity documents.The certificate authority has begun notifying affected customers but has yet to disclose how many people had their information exposed. In an email seen by The Register, DigiCert confirmed the compromised information included names, business email addresses, phone numbers, and business addresses. Some records may also have contained passports, driver's licenses, utility bills, or other identification documents."We are completing a review of identification documents to determine the specific...

Read the full article at the source.