Must read: AI out of control: US govt websites hit as OpenAI bots bypass security controls
eMudhra incident impact
eMudhra incident has raised two major concerns about how such a serious security weakness was allowed to happen, and how quickly the internet can be protected against it. But what does the company do, and why is it a critical issue?
eMudhra is an Indian digital trust and cybersecurity company that issues digital certificates and acts as a digital identity and authentication. These digital certificates act as a website's identity card. So, when you visit a website, your browser needs to check whether it is communicating with the genuine website or not. This certificate helps verify that identity and supports the establishment of an encrypted HTTPS connection.
Don't Miss: Another roadblock for Elon Musk's Starlink? Govt mulls security system for foreign satcom firms
Now, after the incident with the 8 eMudhra certificates, the company has issued a formal statement acknowledging the security concerns and outlining its response to the compromised certificates. “eMudhra is actively investigating a security incident involving a specific set of intermediate CA certificates created as part of a Key Generation Ceremony (KGC) conducted in April 2025 within its public trust infrastructure,” the company said.
“The incident is limited to these specific intermediate CA certificates and does not affect eMudhra's root CA private keys or other intermediate CAs,” it added.
Furthermore, the company said it had taken required steps to contain the affected certificates and was working with browser developers and other operators to prevent potential misuse. The investigation is ongoing, and further updates will be provided as more details emerge.
As far as users are concerned, they need to keep their browsers and apps up to date