eMudhra, a company that issues security certificates for websites, had a security incident. There is no impact to your information, and you do not need to do anything.
Status: Resolved
Last updated: 28/10/2027
What happened
Websites use digital certificates to prove they are genuine, a bit like an ID card for a website. Certificates also help keep the information you send to a website private. Only a small number of trusted companies can issue these certificates, and eMudhra (also called emSign) is one of them.
On 17 October 2026, a security researcher found that some of eMudhra's secret codes could be worked out by anyone. With those codes, a criminal could make a fake ID card for a website and use it to pretend to be that website.
eMudhra cancelled the affected certificates on 18 October 2026. Google, Apple, Microsoft and Mozilla, the companies behind the Chrome, Safari, Edge and Firefox web browsers, have also blocked them. So far there is no public evidence that anyone has misused them.
Was Lumary affected?
No. Lumary was not impacted, and we have found no impact on your information.
What we did
Even though Lumary was not affected, we took extra steps to be safe:
- Updated Lumary staff computers so they no longer trust the affected certificates.
- Checked our network security tools and changed their settings so staff computers automatically reject these certificates.
- Updated the systems our engineering team uses so they also reject these certificates.
- Continuous monitoring for advice from technology companies and the Australian Cyber Security Centre.
What you need to do
No. You can keep using Lumary as normal. As a good everyday habit, we suggest you:
- Keep your web browser (such as Chrome, Safari or Edge) and your computer up to date. The latest updates already block the affected certificates.
- If your organisation has an IT team or IT provider that has connected other systems to Lumary, ask them to check those systems are up to date.
More Information
If you have questions, contact Lumary Support. We will update this article if anything changes.