DigiCert breach exposes customer contact data via internal account
Attackers got into DigiCert's internal systems by creating an account. What they took was contact information, the raw material for targeted phishing.
DigiCert has disclosed a data breach affecting information about its business customers. According to the notice, intruders created an account on one of the company's internal systems and used that access to reach names, email addresses, phone numbers and business addresses. The disclosure was published on 6 November 2026.
The entry point was an account, not an exploit
What stands out is the method: the intruders registered. An internal system handed out an account to someone who should not have had one, which means the checks that ought to come first, who is asking and on whose authority, were either missing or satisfiable from outside. That is a provisioning failure, and it is the kind that survives heavy spending on perimeter defences because nothing about it looks abnormal while it is happening.
Contact data is phishing inventory
Names, work email addresses, phone numbers and office addresses are what make an approach convincing to an employee who has no particular reason to be suspicious. Such a list is worth more in combination than in isolation: it establishes who works where and how to reach them directly. The notice as reported does not say how long the account existed, what else it could reach, or how many customers are affected.