eMudhra: 37% Share Plunge Raises Cybersecurity Concerns

eMudhra (

)Shares Plunge 37% in Two Sessions — What Went Wrong? eMudhra, a digital trust and cybersecurity services company, has faced sharp selling after concerns emerged over compromised digital certificate keys linked to its certificate authority operations. The episode has put the company’s security controls, reputation and potential business impact under scrutiny. What Triggered the Sell-Off? - Researchers identified weaknesses in eight intermediate certificate keys associated with eMudhra. - Google and Mozilla blocked affected certificates, while Google announced plans to remove a related root certificate from Chrome’s trust store. - The concern is that compromised certificate keys could potentially enable fraudulent HTTPS certificates and website impersonation. - eMudhra said the affected certificates had not issued end-user certificates. The company has activated its incident response process and is reviewing its security controls. How Serious Could the Impact Be? According to eMudhra’s co-founder, the affected global TLS business contributes around 1% of the company’s revenue. While that limits the direct revenue exposure suggested by this disclosure, reputational damage and customer confidence remain important risks. My View This is a reminder that cybersecurity companies are not immune to operational and reputational risks. Even if the directly affected business is relatively small, the bigger question is whether the incident affects customer trust, renewals or the company’s ability to win new contracts. Investors should monitor the outcome of the investigation, regulatory developments, customer impact and management’s corrective actions before concluding that the risk has been contained. The sharp correction alone does not establish whether the stock is cheap. Until the extent of the business and reputational impact becomes clearer, valuation should be assessed alongside the uncertainty—not in isolation.