2025-06-13 Zoomcar Holdings, Inc. Cybersecurity Incident

Page last updated on June 14, 2025

Zoomcar Holdings, Inc. initially disclosed a cybersecurity incident in an SEC 8-K filing on 2025-06-13 16:30:29 EDT.

Company Summary

Zoomcar Holdings, Inc. operates as an online car sharing marketplace in India, Indonesia, Vietnam, and Egypt.

Incident Details

Material: Unknown
Is Breach: TRUE
Records Compromised: 8,400,000
Data Types Impacted: Name, Home address, Phone Number, Email

Compromised Date:
Detected Date: 2025-06-09
Disclosure Date: 2025-06-13
Contained Date:
Recovered Date:

Attack Goal: Unknown

Costs: No Costs Tracked (yet)

Filings

8-K filed on 2025-06-13

Zoomcar Holdings, Inc. filed an 8-K at 2025-06-13 16:30:29 EDT
Accession Number: 0001213900-25-054319

Item 1.05 Material Cybersecurity Incidents.

On June 9, 2025, Zoomcar Holdings, Inc. (the “Company”) identified a cybersecurity incident involving unauthorized access to its information systems. The Company became aware of the incident after certain employees received external communications from a threat actor alleging unauthorized access to Company data. Upon discovery, the Company promptly activated its incident response plan.

Based on preliminary findings, the Company determined that an unauthorized third party accessed a limited dataset containing certain personal information of a subset of approximately 8.4 million users, including names, phone numbers, car registration numbers, personal addresses and email addresses associated with such users. At this time, there is no evidence that financial information, plaintext passwords, or other sensitive identifiers were compromised.

In response to the incident, the Company has taken immediate actions to contain the threat and enhance its security posture. These measures include implementing additional safeguards across the cloud and internal network, increasing system monitoring, and reviewing access controls. The Company is also engaging with third-party cybersecurity experts to further assist with the investigation. The Company has also notified the appropriate regulatory and law enforcement authorities and is cooperating fully with their inquiries.

To date, the incident has not resulted in any material disruption to the Company’s operations. However, the Company continues to evaluate the scope and potential impacts of the event, including legal, financial, and reputational considerations, as well as any associated remediation costs.

Company Information