eMudhra Stock Plunges Following Investigation into Cryptographic Key Generation Flaw

Bengaluru-based digital trust and cybersecurity firm eMudhra has come under regulatory scrutiny after a key-generation flaw produced weak cryptographic keys for eight intermediate certificate authorities. Following the government's announcement of a special investigative team, the company's shares dropped significantly, eroding a notable portion of its market capitalization.

Bengaluru-headquartered digital trust and cybersecurity company eMudhra is facing a major controversy following a security flaw in its key-generation process. The flaw resulted in weak cryptographic keys being issued for eight of its intermediate certificate authorities, raising immediate concerns regarding the trustworthiness of its digital certificates.

Following the security incident and the subsequent announcement by the government to form a special team to investigate the matter, shares of eMudhra plunged nearly 20 per cent to close at ₹345.25. The sharp decline extended a broader sell-off, with the stock falling 34 per cent over three consecutive sessions. This reduction lowered the company's market capitalization from approximately ₹4,400–4,600 crore to around ₹3,574 crore, wiping out about ₹850–1,000 crore in market value.

Founded in November 2008 by IT firm 3i Infotech and licensed as a Certifying Authority by the Controller of Certifying Authorities (CCA), Government of India, eMudhra provides digital identity, authentication, certificate lifecycle management, and paperless workflow solutions. The company is promoted by V. Srinivasan, Executive Chairman, alongside members of the Srinivasan family, including Kaushik Srinivasan and Arvind Srinivasan, and Singapore-based Taarav PTE Limited.

Financially, eMudhra reported a strong performance for FY26, with total income rising 35.1 per cent year-on-year to ₹713.2 crore and net profit increasing 26.2 per cent to ₹110 crore. International revenue grew by 38.7 per cent during the same period. For the first quarter of FY27, enterprise solutions comprised approximately 65 per cent of revenue, while trust services and other services accounted for 15 per cent and 20 per cent, respectively. The company operates with around 850 employees and maintains offices across major Indian cities.

Over the years, the firm has expanded its footprint globally through acquisitions such as Cryptas International GmbH in Germany, Ikon Tech Services, and Two95 International in the US, alongside an office in Kazakhstan. As of March 2026, eMudhra operates 13 subsidiaries across India and international markets, serving clients in more than 35 countries.

"For cybersecurity and digital trust companies, integrity and cryptographic reliability are the absolute core of business operations. Any flaw in foundational processes like key generation immediately impacts customer trust and regulatory standing, which is directly reflected in market sentiment and valuation. This situation underscores the critical importance of robust internal controls and continuous security audits, particularly for firms operating at a global scale across highly regulated sectors." — Dr. Shishir Gupta, Founder & CEO, StartupLanes