eMudhra
Hyderabad, India1 source
Confirmed:Confirmed by the organisation, a regulator or a securities filing. First reported 31 Oct 2026.
CERT-In warns of weak keys in eMudhra digital certificates
Weaknesses were discovered in some digital certificate keys; eight intermediate certificate authority keys in the emSign G3 hierarchy were generated with weak security. CERT-In issued an advisory clarifying that regulated digital signature and eSign services were not affected.
- Type
- Cyberattack
- Sector
- Technology
- First reported
- 31 Oct 2026
- Latest source
- 31 Oct 2026
What to do
- Follow updates from the organisation itself rather than social media.
- If you have an account, change that password, and anywhere you reused it.
- Turn on two-factor authentication, ideally an authenticator app or passkey, not SMS.
- Expect phishing that uses your real details. Do not click links in messages about this incident; go to the company's site directly.
- If they are a supplier, ask for an incident summary and the indicators of compromise.
- Patch internet-facing systems first, especially VPNs, firewalls and file transfer software.
Not sure? Ask an assistant with the sources attached, or have a coding agent check your systems.
Check your systems for eMudhra
Sources
1Confidence 70% that this is real and correctly placed. Locations are city centroids at best. Spotted an error? Report a correction.