We want to let you know about a security incident at DigiCert, the company that issues the VMC and CMC certificates you may apply for through Red Sift.
What happened
DigiCert recently told us that between 27 June and 2 July 2026, someone outside DigiCert was able to view information stored in one of its internal record-keeping systems. DigiCert discovered this in October and confirmed the details to us on Thursday 5 November. That system holds the details people share when DigiCert checks an organisation’s identity before issuing a certificate.
While DigiCert has not been able to identify precisely if any Red Sift customers or individuals were affected, we can confirm that Red Sift’s systems and products were not involved, and nothing in them was affected.
Your certificates are safe
DigiCert has confirmed that your certificates remain valid and trusted, and no replacement or reissuance is necessary. You do not need to take any action involving your certificates or Red Sift services.
What information was involved
The information accessed was primarily business contact details, including names, work email addresses, phone numbers and business addresses. In a small number of cases, identity documents submitted during the verification process were also involved. DigiCert has not confirmed whether any Red Sift customers were affected in this way. DigiCert is finishing its review and will contact those people directly.
No passwords or payment details were involved, and DigiCert has stated it has fixed the issue.
A simple precaution
Watch for unexpected emails or calls about certificate renewals, validation or DigiCert, and check with us before acting on anything that seems off.
Questions
For questions about the information DigiCert holds, please contact DigiCert directly. For anything about Red Sift, reach us at privacy@redsift.io.
Thank you for trusting us with your email security. We will provide additional updates on any material developments relevant to Red Sift customers.