Major hack against car-sharing firm Zoomcar sees 8.4 million users at risk

• Zoomcar filed a new 8-K form with the SEC confirming cyberattack
• It found out about the attack from the threat actors
• Over 8 million users could have had their personal data stolen

Car sharing marketplace Zoomcar has suffered a cyberattack in which it lost sensitive information on millions of customers.

In a new 8-K form filed with the US Securities and Exchange Commission (SEC), the company said it was made aware of the attack on June 9, 2025, and a subsequent investigation determined the threat actors managed to steal, “a limited dataset containing certain personal information of a subset of approximately 8.4 million users”.

That includes people’s names, phone numbers, car registration numbers, postal addresses, and email addresses - but at this time, Zoomcar says it has no reason to believe financial information, passwords, or other sensitive identifiers were compromised.