security

Botched server move left the door open, and DigiCert took months to notice someone had wandered in

DigiCert has admitted that a botched server migration left an internal system exposed to the internet for more than a year, allowing an unauthorized user to access customer data, including passports, driver's licenses, and other identity documents.

The certificate authority has begun notifying affected customers but has yet to disclose how many people had their information exposed.

In an email seen by The Register , DigiCert confirmed the compromised information included names, business email addresses, phone numbers, and business addresses.…