Zoomcar

Zoomcar suffered a data breach incident and the personal data of its around 3.5 million users were put on sale on the dark web.

The data included names, email ids, passwords, mobile numbers and IP addresses and the hacker offered to sell the data of 9 million users for $300.

Source: https://economictimes.indiatimes.com/internet/data-of-3-5-million-zoomcar-customers-up-for-sale/articleshow/75896086.cms

TPRM report: https://scoringcyber.rankiteo.com/company/zoomcar-india-pvt-ltd-

"id": "zoo2337241122",
"linkid": "zoomcar-india-pvt-ltd-",
"type": "Data Leak",
"date": "05/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 3500000,
                        'industry': 'Car Rental',
                        'name': 'Zoomcar',
                        'type': 'Company'}],
 'attack_vector': 'Unknown',
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': 3500000,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'Medium',
                 'type_of_data_compromised': ['names',
                                              'email ids',
                                              'passwords',
                                              'mobile numbers',
                                              'IP addresses']},
 'description': 'Zoomcar suffered a data breach incident where the personal '
                'data of around 3.5 million users were put on sale on the dark '
                'web. The data included names, email ids, passwords, mobile '
                'numbers, and IP addresses. The hacker offered to sell the '
                'data of 9 million users for $300.',
 'impact': {'data_compromised': ['names',
                                 'email ids',
                                 'passwords',
                                 'mobile numbers',
                                 'IP addresses']},
 'initial_access_broker': {'data_sold_on_dark_web': True},
 'motivation': 'Financial Gain',
 'threat_actor': 'Unknown',
 'title': 'Zoomcar Data Breach',
 'type': 'Data Breach'}