Editing Verisign (section)

=== 2010: Data breach and disclosure controversy ===

In February 2012, Verisign revealed that their network security had been repeatedly breached in 2010. Verisign stated that the breach did not impact the [[Domain Name System]] (DNS) that they maintain, but would not provide details about the loss of data. Verisign was widely criticized for not disclosing the breach earlier and apparently attempting to hide the news in an October 2011 SEC filing.<ref name="pcworld1">{{cite web |last=Bradley |first=Tony |url=http://www.pcworld.com/article/249242/verisign_hacked_what_we_dont_know_might_hurt_us.html |title=VeriSign Hacked: What We Don't Know Might Hurt Us |publisher=PCWorld |date=2012-02-02 |access-date=July 13, 2013 |archive-url=https://web.archive.org/web/20130611054417/http://www.pcworld.com/article/249242/verisign_hacked_what_we_dont_know_might_hurt_us.html |archive-date=June 11, 2013 |url-status=live |df=mdy-all }}</ref><ref>{{cite web |last=Albanesius |first=Chloe |url=https://www.pcmag.com/article2/0,2817,2399773,00.asp |title=VeriSign Hacked Multiple Times in 2010 &#124; News & Opinion |publisher=PCMag.com |date=February 2, 2012 |access-date=July 13, 2013 |archive-url=https://web.archive.org/web/20130116083322/http://www.pcmag.com/article2/0,2817,2399773,00.asp |archive-date=January 16, 2013 |url-status=live |df=mdy-all }}</ref>

Because of the lack of details provided by Verisign, it was not clear whether the breach impacted the certificate signing business, acquired by Symantec in late 2010. Some, such as Oliver Lavery, the Director of Security and Research for nCircle, doubted whether sites using Verisign SSL certificates could be trusted.<ref name="pcworld1"/>