Shares of eMudhra sank 20% on Wednesday, October 21, after the company disclosed that the private keys of eight of its intermediate certificates had been compromised.
The breach, first reported on October 17, triggered immediate action by Mozilla, which blocked the affected certificates via OneCRL and removed the root certificate from its trust store.
eMudhra’s own blog post confirmed that the incident was isolated to its certificate‑issuing function that operates under an international trust framework, a segment not overseen by MeitY.
CERT‑In warned that the keys were generated with insufficient cryptographic randomness, making them vulnerable to instant recovery, and urged enterprises to adopt stricter best practices.
The incident has prompted the Ministry of Electronics and Information Technology to form a special investigative team, while also cautioning against social‑media panic.
Looking ahead, investors are watching how the company will address the security gap, as the next earnings release is scheduled for December. The market will gauge whether the breach impacts revenue from its document‑processing automation and AI offerings, and whether any regulatory penalties could emerge.