DigiNotar Reports Security Incident

VASCO Data Security International, Inc. VDSI today comments on DigiNotar's reported security incident. DigiNotar is a wholly owned subsidiary of VASCO. On July 19th, 2011, DigiNotar detected an intrusion into its Certificate Authority infrastructure, which resulted in the fraudulent issuance of public key certificate requests for a number of domains, including Google.com. Once it detected the intrusion, DigiNotar has acted in accordance with all relevant rules and procedures. At that time, an external security audit concluded that all fraudulently issued certificates were revoked. Recently, it was discovered that at least one fraudulent certificate had not been revoked at the time.  After being notified by Dutch government organization Govcert, DigiNotar took immediate action and revoked the fraudulent certificate.