Eight Web Security Keys Leaked from Government Service Provider eMudhra

Bengaluru-based eMudhra, a technology firm that provides digital security certificates to the public sector and government bodies, experienced a leak of eight web security keys. Key government portals, including the Unique Identification Authority of India (UIDAI)—which issues Aadhaar—and the Income Tax Department portal, utilize eMudhra's digital certificates to authenticate online transactions.

Following the discovery of the issue, major browser vendors including Google Chrome, Mozilla Firefox, Apple, and Microsoft acted swiftly to block the affected certificates in their systems. Meanwhile, eMudhra promptly revoked the eight compromised security keys and tightened its overall security protocols.

Officials clarified that the company's core root certificates remained completely unaffected by the leak. Furthermore, authorities confirmed that no user data has been compromised or misused as a result of the incident so far.