eMudhra Shares Hit 52-Week Low Following Government Probe into Security Incident

Shares of digital certification firm eMudhra experienced a sharp decline on Thursday, plunging nearly 20 percent to reach a 52-week low following government action regarding a security incident.

On the National Stock Exchange (NSE), the stock tumbled 19.91 percent to trade at ₹346 per share. Simultaneously, the scrip fell 19.63 percent to ₹346.85 per share on the Bombay Stock Exchange (BSE). The broader market indices saw minor movements during late morning trade, with the BSE Sensex slipping 41.73 points to 73,667.96 and the NSE Nifty falling 47.35 points to 22,764.

The market reaction follows an announcement by the Ministry of Electronics and Information Technology (MeitY) on Wednesday confirming the formation of a special team to investigate the security incident at eMudhra. The company issues digital signatures and website security certificates that enable browsers to establish secure connections for public access and confirm that a website is genuine.

According to the government statement, the reported security incident largely pertains to the global certificate business, with the impact on Indian sites and applications described as very limited. The disclosure followed an advisory issued by the cybersecurity watchdog CERT-In, revealing that private keys associated with eMudhra's certificates—used to verify trusted digital assets and ensure secure online data transmission—had been compromised.

Addressing the development, a senior company official stated that weak keys were created by eight out of 40 certifying authorities but were never put to commercial use, indicating that no actual cybersecurity breach occurred due to vulnerable keys. The official further clarified that other business lines, including the India digital signature and enterprise solutions business, remain unaffected by the incident.

Regulatory and security analysts noted that compromised keys, if exploited, could potentially be used by cyber criminals to develop fraudulent online platforms impersonating genuine payment entities, which could risk user data and payments.

"This incident highlights the critical importance of robust cybersecurity protocols and infrastructure for digital infrastructure providers. When regulatory bodies intervene in matters concerning data security and cryptographic keys, market sentiment is naturally impacted, as seen in the sharp correction in eMudhra's share price. For digital trust businesses, maintaining absolute integrity in key management and transparent communication with stakeholders are essential to preserving long-term enterprise value and market confidence." — Dr. Shishir Gupta, Founder & CEO, StartupLanes