Zoomcar Data Breach: 8.4 Million Users Affected by Cyber Attack
TL;DR
Zoomcar, an India-based car-sharing company, experienced a significant data breach affecting 8.4 million users. The compromised data includes personal information such as names, phone numbers, and addresses. No financial data or passwords were exposed.
Zoomcar Faces Major Data Breach Affecting 8.4 Million Users
Zoomcar, a prominent India-based car-sharing and self-drive car rental company, recently disclosed a data breach impacting 8.4 million users. The breach was discovered after threat actors contacted company personnel, claiming to have compromised Zoomcar’s internal systems.
Data Breach Details
The exposed information includes:
- Names
- Phone numbers
- Car registration numbers
- Personal addresses
- Email addresses
Zoomcar has confirmed that no financial data or plaintext passwords were compromised in the breach.
Official Statement
According to the FORM 8-K filed with the US Securities and Exchange Commission (SEC):
“On June 9, 2025, Zoomcar Holdings, Inc. identified a cybersecurity incident involving unauthorized access to its information systems. The company became aware of the incident after certain employees received external communications from a threat actor alleging unauthorized access to company data. Upon discovery, the company promptly activated its incident response plan.”
Company Response
Zoomcar has taken swift action in response to the incident, including:
- Engaging cybersecurity experts to boost cloud and network security.
- Notifying relevant authorities about the security breach.
- Assessing the legal, financial, and reputational impacts of the breach.
The company continues to evaluate the scope and potential impacts of the event, including any associated remediation costs. So far, operations remain unaffected.
Previous Data Breach
This is not the first time Zoomcar has faced a data breach. In July 2018, the company experienced a breach that exposed the data of more than 3.5 million users, including names, email and IP addresses, phone numbers, and passwords1.
Follow for More Updates
- Twitter: @securityaffairs
- Facebook: Security Affairs
- Mastodon: Security Affairs
Author Information
Additional Resources
For further insights, check: