Privacy Unpacked- People affected
- Not reportedno count given yet
- Reported
- 4 November 2026News report and 5 more
What was exposed 12
- Passport numbers
- Driver’s license numbers
- Government ID numbers
- Email addresses
- Phone numbers
- Names
- Business addresses
- Driving licenses
Show 4 more
- Utility bills
- Customer contact details
- Customer names
- Customer identification documents
How it happened
- How
- Data left open (misconfiguration)
The internal company system was initially in a network that was only accessible via a VPN. However, on February 4, 2025, the system was moved to another network where it was accessible to the entire internet. An additional problem was that unauthorized users could create accounts to log in to the system. In addition, accounts created via the "account manager system" in question did not require multifactor authentication (MFA).
sourceOur translation from Dutch
Het interne bedrijfssysteem bevond zich in eerste instantie in een netwerk dat alleen toegankelijk was via een vpn. Het systeem werd echter op 4 februari 2025 naar een ander netwerk verhuisd, waar het voor heel het internet toegankelijk was. Een bijkomend probleem was dat ongeautoriseerde gebruikers accounts konden aanmaken om op het systeem in te loggen. Daar kwam bij dat voor accounts die via het betreffende 'account manager system' werden aangemaakt geen multifactorauthenticatie (MFA) was vereist.
Sources 6
- News reportCyber Security NewsDigiCert Confirms Data Breach Exposing Customer Details and Sensitive Identity Documents4 November 2026Confirmed by DigiCert:
DigiCert has confirmed a data breach
- News reportSecurity.nlCertificate authority DigiCert leaks ID documents and customer data (our translation from Dutch)5 November 2026Confirmed by DigiCert:
The company announced this itself
Our translation from Dutch
Dat heeft het bedrijf zelf bekendgemaakt
- News reportThe RecordCertificate authority DigiCert reports data breach involving business customer info6 November 2026Archived copy Wayback Machine, 6 November 2026Confirmed by DigiCert:
On October 19, DigiCert confirmed that the database was accessed starting on June 27 and that it was a "reportable event."
- News reportThe RegisterDigiCert admits 16-month security lapse exposed customer information6 November 2026Archived copy Wayback Machine, 6 November 2026Confirmed by DigiCert:
DigiCert admits 16-month security lapse exposed customer information
Show all 6 sources
- News reportSecurityWeekDigiCert Data Breach Impacts Business Customer Information6 November 2026Archived copy Wayback Machine, 6 November 2026Confirmed by DigiCert:
DigiCert says hackers accessed archived data
- News reportit-daily.netDigiCert: Data breach exposes customer identity documents (our translation from German)5 November 2026
News reports are read by an AI model; every fact taken from an article was checked word for word against it, and anything it could not find was dropped. · Corrections and changes