What happened with the TLS certificate private key leak? What actions need to be taken?

Leak of a TLS certificate private key is a serious issue, as an attacker can use the key to intercept or forge encrypted traffic.

Required actions:

1. Immediately revoke the compromised certificate with the certification authority (CA) so that it is no longer considered valid.
2. Generate a new private key and CSR (certificate signing request).
3. Obtain a new TLS certificate and install it on the servers.
4. Update all services and clients that use this certificate.
5. Conduct a security audit to understand how the leak occurred and to eliminate vulnerabilities.
6. If necessary, notify users and partners about potential risks.

It is also important to review key storage policies, use Hardware Security Modules (HSM), or other methods to protect private keys.