Business

ICRA Keeps eMudhra’s Credit Rating Unchanged After Global Certificate Security Lapse

NEWZA Editorial Team•

⚡ Key Financial Takeaways

  • ICRA reaffirmed eMudhra’s ICRA‑A (Stable) and ICRA‑A1 ratings on Oct 23, covering Rs 35 crore of unallocated credit limits.
  • A faulty key‑generation issue at eight intermediate certificate authorities led browsers to block the certificates, prompting eMudhra to revoke them and exit the global SSL/TLS market.
  • The global certificate segment contributed roughly 1% of eMudhra’s consolidated revenue, so earnings impact is expected to be modest.
  • ICRA highlighted reputational risk, potential regulatory scrutiny and possible client attrition, especially in the enterprise solutions and overseas markets that account for 64% of revenue.
  • eMudhra remains debt‑free with healthy liquidity, giving it capacity to absorb exit costs and any short‑term disruption.

💡 Why It Matters

eMudhra is a key player in India’s digital trust ecosystem, providing digital signatures and certificate services to enterprises and government bodies. A breach in its global certificate business raises concerns about the robustness of its security processes, which could affect client confidence and trigger regulatory action. The rating agency’s decision to keep the rating unchanged signals that the firm’s overall financial health remains sound, but the reputational risk could influence future growth, especially in overseas markets.

Rating unchanged despite security incident ICRA issued an update on 23 October confirming that eMudhra Ltd’s credit ratings remain at ICRA‑A (Stable) and ICRA‑A1, covering the company’s Rs 35 crore of unallocated credit limits. The agency said the rating stands even after a security lapse in the Bengaluru‑based firm’s global website‑certificate business.

What triggered the lapse The problem originated from faulty key generation at eight intermediate certificate authorities (CAs) that vouch for SSL/TLS certificates. Browser vendors responded by blocking the affected CAs, and eMudhra promptly revoked the compromised certificates. In the aftermath, the board decided to wind down the global certificate operation and focus on its enterprise‑solution offerings and other trust services.

Financial impact ICRA expects the exit from the global SSL/TLS segment to have only a modest direct effect on earnings, as the business contributed about 1% of eMudhra’s consolidated revenue. However, the agency warned that the incident could damage the firm’s reputation, invite regulatory scrutiny and make it harder to retain and win customers in its enterprise solutions arm and overseas markets, which together generate roughly 64% of revenue.

Liquidity cushion and debt position Despite the setback, eMudhra carries no net debt and maintains strong liquidity, according to ICRA. This financial footing should enable the company to absorb any short‑term costs associated with the exit and any potential claims arising from the security breach.

Management response Co‑founder Kaushik Srinivasan told CNBC‑TV18 on 22 October that the incident was a one‑off event and that no data was compromised. He also assured that the domestic Digital Signature Certificate and eSign services remain unaffected.

Ongoing monitoring ICRA said it will continue to track the regulatory review, eMudhra’s business performance and order flow over the next few quarters.

🏛️ Background & Context

eMudhra Ltd, founded in 2000, offers digital signature certificates, eSign services and, until recently, global SSL/TLS certificates. The global certificate market is highly competitive, with major players such as DigiCert and Sectigo. Regulatory oversight of certificate authorities in India has tightened after several high‑profile security incidents worldwide, making any lapse a potential trigger for formal investigations.

👁️ What To Watch Next

Watch for the outcome of the regulatory probe into the faulty key‑generation incident, any formal claims from affected clients, and eMudhra’s quarterly earnings reports to gauge the financial impact of exiting the global certificate business.

Topics:#eMudhra#ICRA#Credit Rating#Cybersecurity#Digital Trust

More in Business

Back to Home