Zoomcar

Zoomcar, a Bengaluru-based car share company, reported a data breach discovered on June 9, 2023, affecting the personal information of 8.4 million users. The breach included names, phone numbers, car registration numbers, addresses, and emails. Although no financial information or passwords were stolen, the incident may lead to reputational and remediation costs. The company has implemented additional safeguards and hired a cybersecurity firm to help with the response. Zoomcar has faced a similar breach in July 2018, affecting 3.6 million customers.

Source: https://therecord.media/8-million-affected-zoomcar-data-breach

TPRM report: https://scoringcyber.rankiteo.com/company/zoomcar-india-pvt-ltd-

"id": "zoo606061625",
"linkid": "zoomcar-india-pvt-ltd-",
"type": "Breach",
"date": "6/2025",
"severity": "85",
"impact": "",
"explanation": "Attack with significant impact with customers data leaks: Attack which causes leak of personal information of customers ( only if no ransomware )"

{'affected_entities': [{'customers_affected': '8.4 million',
                        'industry': 'Transportation',
                        'location': 'Bengaluru, India',
                        'name': 'Zoomcar',
                        'type': 'Car Sharing Company'}],
 'data_breach': {'number_of_records_exposed': '8.4 million',
                 'personally_identifiable_information': ['names',
                                                         'phone numbers',
                                                         'addresses',
                                                         'emails'],
                 'type_of_data_compromised': ['names',
                                              'phone numbers',
                                              'car registration numbers',
                                              'addresses',
                                              'emails']},
 'date_detected': '2023-06-09',
 'date_publicly_disclosed': '2023-06-16',
 'description': 'Indian car share company Zoomcar reported a data breach '
                'affecting 8.4 million users, with personal information such '
                'as names, phone numbers, car registration numbers, addresses, '
                'and emails being compromised.',
 'impact': {'brand_reputation_impact': 'Potential reputational costs',
            'data_compromised': ['names',
                                 'phone numbers',
                                 'car registration numbers',
                                 'addresses',
                                 'emails']},
 'investigation_status': 'Ongoing',
 'references': [{'source': 'Company Report'}],
 'regulatory_compliance': {'regulatory_notifications': 'Reported to the U.S. '
                                                       'Securities Exchange '
                                                       'Commission (SEC)'},
 'response': {'containment_measures': 'Additional safeguards implemented',
              'third_party_assistance': 'Hired a cybersecurity firm'},
 'threat_actor': 'Unauthorized third party',
 'title': 'Zoomcar Data Breach',
 'type': 'Data Breach'}