eMudhra discloses compromised cryptographic keys in global security incident

Bengaluru-based tech firm eMudhra disclosed that weak private cryptographic keys linked to eight international intermediate certificates were generated due to a software flaw in April 2025.

An independent researcher uncovered the vulnerability using reverse-engineering techniques over the weekend, prompting major browser makers to block all affected certificates.

Cybersecurity experts warned that the flaw could have allowed malicious actors to intercept encrypted web traffic, though eMudhra confirmed no breach of its internal infrastructure or Indian DSC services.