Skip to footer

tech

Eight web security keys of firm used by government and PSUs leaked

Eight eMudhra web security certificate keys used by government and PSU sites have leaked, prompting browser and OS developers to patch

Updated 1 min read

Published by Agyata NewsroomEditorial policyCorrections

Archived — last updated

Eight private keys used by Bengaluru-headquartered eMudhra Ltd. to issue web security certificates have been leaked, according to an anonymous researcher who alerted major internet infrastructure firms. Browser and operating system developers are scrambling to patch their systems to stop trusting the affected certificates. Many government websites, including the Aadhaar issuer UIDAI and the income tax filing portal, use eMudhra certificates or other technology from the firm.

Latest updates

Eight web security keys of firm used by government and PSUs leaked

Eight web security keys belonging to a company that serves Indian government websites and public sector undertakings have been leaked, according to a report. The affected entities include the Unique Identification Authority of India (UIDAI), which issues Aadhaar, and the Income Tax filing portal. These organisations use eMudhra certificates or other related technology for secure web communications. The leak raises concerns about the security of sensitive government digital infrastructure. Authorities have not yet issued a public statement on the extent of the exposure or any remedial measures taken.

The Hindu

Sources

AI-assisted summary of the reporting above. Quotes are kept to one sentence. Copyright concern? See our DMCA takedown page.