eMudhra says TLS certificate security incident impacted 1% of revenue

eMudhra Ltd on Wednesday said the certificate security incident encountered in its Transport Layer Security (TLS) business in October impacted around 1% of the company's revenue.

The digital security firm revoked the affected intermediary certificates following the incident. "In October, we encountered a certificate security incident in our TLS business, which represented approximately 1% of revenue...No end-entity certificates were issued by the affected intermediary certificate authorities, and the company's infrastructure was not compromised," Executive Chairman V. Srinivasan said.

"There was no data breach, and all physical and logical security controls remain intact," he said.


eMudhra has appointed KPMG as an independent external reviewer to examine the incident.

The SSL/TLS business contributes to approximately 1% of eMudhra’s global revenue, the executive said.

"The business potential and RoI of this line of business has considerably reduced for eMudhra when measured against our cumulative revenue base. Hence, as announced earlier, eMudhra will cease the sale of TLS certificates and exit that line of business and sharpen the focus on our Core Enterprise Platforms, eSign, and Digital Signature offerings," said Srinivasan.

In the first six months of FY27, the company's total income stood at Rs 4,018 million, up 23.4% year-on-year; while Profit After Tax stood at Rs 654 million, up 27.1% y-o-y.

Following the security incident, the eMudhra exited its global business of issuing security certificates for websites including India's tax portal after major browser makers blocked ​them for vulnerabilities that sparked worldwide cybersecurity concerns.

The company made the announcement in October after technology giants including ‌Google, Apple and Microsoft stopped trusting its SSL/TLS certificates, which encrypt data sent between users and websites to keep hackers from intercepting it.