MeitY Forms Probe Team After eMudhra Certificate Breach, Says Impact on Indian Sites Was Limited

What Happened

MeitY created a dedicated team on 21 October to investigate the compromise of eight intermediate CA certificates that are part of eMudhra’s internationally trusted certificate portfolio. ## Why It Matters Certificates are the digital “passports” that let browsers confirm a website’s identity and set up encrypted connections. If a certificate authority is breached, attackers could impersonate trusted sites or intercept data, weakening the security of online transactions and communications. The incident was confined to eMudhra’s global certificate business, which serves browsers and operating systems worldwide, and did not touch its domestic digital‑signature services used for eSign and other Indian government processes. Because the breach was short‑lived, the overall risk to Indian users remained low, but the episode highlights the importance of rigorous audits and rapid response to certificate compromises. ## What Happens Next MeitY’s probe team will complete its technical review and share detailed findings. In the meantime, affected organisations are advised to follow CERT‑In’s mitigation steps, such as updating or re‑issuing certificates and checking for any unusual activity on their sites. The ministry will monitor the situation and update stakeholders once the investigation concludes.