eMudhra says Philippines services remain unaffected after TLS security incident

eMudhra said its Philippines operations and TLS services were not affected by a security incident tied to eight intermediate certificate authorities in a global TLS hierarchy. The company says it revoked the affected intermediates within hours, is supporting impacted customers, and is adding alternate certificate options to improve redundancy.

Why it matters: - eMudhra is trying to reassure customers in the Philippines that a limited security incident in its TLS business did not disrupt local services. - The company says the episode did not compromise its infrastructure or customer data, which matters for trust in digital identity and certificate services. - eMudhra also says it is adding redundancy for TLS customers to reduce the risk of similar ecosystem-wide disruptions in the future.

What happened: - eMudhra said services and customer operations in the Philippines remain unaffected after a security incident involving a specific set of intermediate Certificate Authorities in its TLS business. - The incident involved eight intermediate CAs tied to one Global TLS hierarchy. - None of the affected intermediates issued end-entity certificates. - eMudhra said its investigation found no compromise of its infrastructure or customer data. - The company said there has been no impact to its Philippines services, including TLS services.

The details: - eMudhra said its broader digital trust and enterprise technology portfolio continues to operate normally, including emCA, CertiNext, emSigner, SecurePass and Privatrust. - The company said the affected Global TLS hierarchy is only one part of its broader digital trust business. - Publicly trusted TLS operates within the global WebPKI ecosystem and is governed through browser and operating-system root programs. - eMudhra said that is separate from the broader PKI, identity, signing, authentication and enterprise trust infrastructure it provides to organizations worldwide. - After confirming the issue, eMudhra said it revoked the affected intermediate CAs within hours. - The company said it began working with the limited customer ecosystem affected by the resulting root distrust to help replace certificates and maintain service continuity. - eMudhra said it has also made certificates from an alternate publicly trusted Certificate Authority available to TLS customers, including customers whose existing certificates were not impacted. - The company said that step is meant to provide added CA redundancy, flexibility and continuity if similar ecosystem-wide events happen again. - Arvind Srinivasan, EVP & Director at eMudhra, said there has been no impact to customers or services in the Philippines and that the company’s commitment to the market remains unchanged.

Between the lines: - The company is separating a narrow TLS infrastructure issue from its broader identity and enterprise software business. - eMudhra is also using the incident to signal operational resilience and tighter controls, not just remediation. - The message to Philippine customers is that local support and service commitments remain intact despite the wider TLS event.

What's next: - eMudhra said it will continue supporting customers in the Philippines through emCA, CertiNext, emSigner, SecurePass and Privatrust. - The company said it maintains a local presence in Metro Manila and will keep supporting customers, partners, enterprises and institutions there. - eMudhra said it will keep investing in technology, customer support, operational resilience and digital trust capabilities. - The company said it wants to help organizations in the Philippines modernize securely and confidently as digital transformation accelerates.

The bottom line: - eMudhra says the TLS incident was limited, contained and separate from its Philippines operations, and the company is positioning its response as proof of resilience rather than disruption.