tech
Government Websites Exposed by eMudhra Security Key Leak
eMudhra revealed that eight private keys used by government websites and PSUs were compromised following a CERT-In advisory.
eMudhra, a Bengaluru-headquartered digital certification authority, revealed that eight private keys associated with its certificates were compromised. The disclosure followed an advisory from the cybersecurity watchdog CERT-In. The Ministry of Electronics and Information Technology stated the impact on Indian sites, including the income tax filing portal and UIDAI, is very limited. eMudhra claims its infrastructure was not compromised and no data was breached.
Latest updates
Government Websites Exposed by eMudhra Security Key Leak
eMudhra provides the digital keys used by various government portals to sign their security certificates. These certificates are required for browsers to display a website as secure and trusted. The recent leak compromises the integrity of these signatures, potentially allowing fraudulent sites to mimic official government pages. Authorities are currently assessing the extent of the exposure across different administrative domains.