Breaches and incidents
Zoomcar (India): unauthorised access to data of about 8.4 million users
Zoomcar Holdings (Bengaluru, Nasdaq-listed) filed an 8-K Item 1.05.
- Disclosed
- Verification
- Checked against a primary source
What happened
- Zoomcar Holdings (Bengaluru, Nasdaq-listed) filed an 8-K Item 1.05: on 9 Jun 2025 it identified unauthorised access after employees received messages from a threat actor; names, phone numbers, car registration numbers, addresses and emails of about 8.4 million users were accessed. No evidence financial data or plaintext passwords were taken.
- Root cause: not disclosed.
- Attacker: unidentified threat actor who contacted employees.
- Response: incident response plan activated, cloud and internal network safeguards, access review, third-party experts, regulators and law enforcement notified.