Zoomcar Data Breach Exposes Sensitive Details of 8.4 Million Users

Zoomcar Holdings, Inc., the prominent car-sharing platform, has confirmed a significant data breach that has compromised the personal information of approximately 8.4 million users.

The incident, which was first detected on June 9, 2025, was disclosed in a recent filing with the U.S. Securities and Exchange Commission (SEC), raising concerns about data security and privacy for millions of customers across India and other markets where Zoomcar operates.

Details of the Breach

According to the company’s official statement, the breach was identified after Zoomcar employees received communications from an external threat actor claiming unauthorized access to company data.

An immediate investigation revealed that the attacker had gained access to a limited dataset containing user names, phone numbers, car registration numbers, personal addresses, and email addresses.

Zoomcar emphasized that, based on preliminary findings, there is currently no evidence that financial information, plaintext passwords, or ...