2011 DigiNotar — 531 fraudulent SSL certificates
Data compromised
Certificate authority compromise; MITM capability
Technical writeup
Dutch CA hacked; attackers issued 531 fraudulent certs for Google, Facebook, Twitter, etc. ~300K Iranian Gmail users targeted with MITM. Complete compromise of all 8 cert-issuing servers. DigiD (Dutch gov identity) at risk. Company bankrupt Sept 2011.
Root cause
Hacking; weak passwords, no antivirus, poor segmentation