eMudhra appoints KPMG for security review following TLS certificate incident
- Reports
- 2
- Developments
- 1
- Repetition
- 50%
New informationRepeats or wire copies
What happened
eMudhra appointed KPMG to conduct an independent review of a security incident involving eight of its digital certificates. This incident occurred on October 17, when a security researcher reported that private keys for eight intermediate certificate authority certificates could be recovered. Following the discovery of weak security keys in its global Transport Layer Security business, eMudhra revoked the affected certificates and decided to withdraw from that business on October 22.
Why it matters
The security failure led to eMudhra's shares falling 4% in Friday's trade. The company stated that its India digital signature and eSign businesses were unaffected by the compromise, though it withdrew from its global TLS certificate business.
Who's involved
- KPMGProvider of audit and advisory services appointed to review the security incident.
- Ministry of Electronics and Information TechnologyGovernment agency in India potentially facing increased regulatory oversight.
Who could feel it
Possible knock-on effectsThese are possibilities Brind reasoned out, not predictions, and not advice. Most are not stated in any report.
- KPMGSpeculative
Could see increased contract acquisition due to the high-profile security review appointment.
Possible ripples
Who this could reach next, traced step by step from the reporting. Possibilities worth considering, not forecasts.Keep exploring
The entities involved
-
KPMG
provider of audit, legal, tax advisory, financial, and business advisory services