DigiCert reports data breach involving enterprise customer information

What happened and what to do

DigiCert said that during the summer an internal business system became accessible externally when this was not intended, and that someone created an unauthorized account on that system. According to the article from The Record, which cites the company, the incident involved enterprise customer information.

For a company with similar internal systems, the case calls for an inventory of everything published on the internet, such as admin panels, APIs and registration portals, compared against the official systems inventory. In parallel, it is worth auditing accounts created in recent months, requiring multi-factor authentication for administrative access, and setting alerts for new accounts and changes in exposure, with these signals centralized in a dashboard. Where data is sensitive, log collection and scheduled checks can run on the company's own infrastructure, without depending on external tools.

How the consultancy can help

Diagnosis of exposure in internal systems and accounts, reviewing published endpoints, user creation logs and access controls, followed by implementation of continuous monitoring, alerts and assisted operation on the client's infrastructure.

Next step

If your company runs internal systems reachable from the internet or manages customer accounts, send a short description of your case and receive a scoped proposal for diagnosis and implementation.