- Eight web security keys belonging to eMudhra, a prominent digital signature provider used by government agencies and Public Sector Undertakings (PSUs), were leaked. - The leak exposes vulnerabilities in critical digital infrastructure and identity management systems utilized by state organs. - Highlights the growing threat of cyber espionage and security lapses in private vendors servicing government infrastructure. - Emphasizes the need for stringent cybersecurity compliance, audits, and robust data protection frameworks. - **eMudhra:** A licensed Indian certifying authority providing digital signatures, trust services, and e-sign solutions relied upon by government departments, PSUs, and enterprises. - **Cert-In:** India’s national nodal agency under the Ministry of Electronics and Information Technology (MeitY) responsible for responding to cyber security incidents and issuing advisories. **Introduction** Eight web security keys of eMudhra, a key digital signature and security solutions provider heavily relied upon by government entities and PSUs, have been leaked, raising major concerns regarding critical digital infrastructure security, data privacy, and vulnerability to cyber threats. **Core Issue and Detailed Points** - Eight web security keys belonging to eMudhra, a prominent digital signature provider used by government agencies and Public Sector Undertakings (PSUs), were leaked. - The leak exposes vulnerabilities in critical digital infrastructure and identity management systems utilized by state organs. - Highlights the growing threat of cyber espionage and security lapses in private vendors servicing government infrastructure. - Emphasizes the need for stringent cybersecurity compliance, audits, and robust data protection frameworks. **Key Statutory Bodies, Acts & Concepts** - **eMudhra:** A licensed Indian certifying authority providing digital signatures, trust services, and e-sign solutions relied upon by government departments, PSUs, and enterprises. - **Cert-In:** India’s national nodal agency under the Ministry of Electronics and Information Technology (MeitY) responsible for responding to cyber security incidents and issuing advisories.