eMudhra Revokes Weak Keys After Leak

eMudhra confirms a security researcher found weak keys in eight intermediate CAs on October 17, 2026. The company revoked all eight intermediates within 14 hours. No customer data was breached, and the incident affected only the intermediate layer. eMudhra has hired KPMG for an independent review and is migrating affected customers to alternate providers at no cost.