eMudhra Faces Private Key Compromise as Certificate Authority Scrutiny Looms

Digital trust company eMudhra has faced a compromise involving its private keys, which are essential for issuing secure digital certificates. Whalesbook reported the incident, which poses operational and reputational risks for the listed firm.

eMudhra's Role as a Certificate Authority

eMudhra operates as a licensed Certificate Authority, an entity that verifies the identity of websites and users and issues the digital certificates that underpin secure internet communication. When a certificate authority's private keys are compromised, the integrity of the certificates it has issued may be called into question.

In the digital trust business, security is the primary product. Any breach of that trust can lead to operational hurdles, as the company must verify the extent of the impact and may face heightened scrutiny from the Controller of Certifying Authorities in India, which regulates such entities.

The broader global context adds to the pressure, as various digital infrastructure platforms, including those relying on PHP and Node.js, are currently managing widespread security flaws. Whalesbook reported that while these are separate technical issues, the timing highlights a difficult environment for cybersecurity firms responsible for securing digital identity and server integrity.

eMudhra's Scale and Recent Partnerships

According to akta.pro company records, eMudhra serves more than 1,000 large enterprise customers across over 50 countries and has issued more than 100 million digital certificates. The same records show a strategic partnership with LankaPay (LankaSign) in May 2026 to enable legally trusted digital signatures across Sri Lanka's financial and public sector, with Commercial Bank of Ceylon as the first bank onboarded.

eMudhra's Quarter and LEI Appointment

eMudhra reported consolidated net sales of Rs 190.72 crore for the quarter ended June 2026, a 29.47% year-over-year increase from Rs 147.30 crore in June 2025, according to Business News Today. In September 2026, IBS Intelligence reported that eMudhra was appointed as a Validation Agent of Legal Entity Identifier India within the Global LEI system, integrating LEI services into its digital onboarding.

What to Watch Next

Whalesbook reported that investors may monitor the company's exchange filings for official statements regarding the scope of the compromise, remedial actions taken to secure its infrastructure, and any communication regarding potential impacts on its services. The response from the regulatory body overseeing certificate authorities will also be a factor, as it dictates the company's operational permissions.