Your go-to hub for Expert Insights,
Publications, and Resources on
data privacy and compliance

Zoomcar, a leading car-sharing platform, has disclosed a significant data breach that compromised the personal information of approximately 8.4 million users. The company informed the United States Securities and Exchange Commission (SEC) of the breach in a regulatory filing dated June 13, 2025.

According to the filing, unauthorized third-party access exposed sensitive customer information, including:

• Full names
• Phone numbers
• Residential addresses
• Email addresses
• Car registration numbers

The breach came to light after several Zoomcar employees began receiving suspicious messages, prompting an internal investigation. Following the discovery, Zoomcar activated its incident response protocols and is now working with third-party cybersecurity experts to assess the full scope of the intrusion.

The company has also reported the incident to relevant regulatory and law enforcement authorities and is actively cooperating with ongoing inquiries. While Zoomcar has confirmed that the breach has not caused any material disruption to its operations, it continues to evaluate potential legal, financial, and reputational consequences.

In its official statement, Zoomcar emphasized its commitment to data protection and stated that it is taking all necessary steps to enhance its security infrastructure and safeguard customer data against future threats.

This incident serves as a stark reminder of the growing cybersecurity risks faced by digital platforms and highlights the importance of proactive data governance and breach response planning.

For affected users:
Zoomcar has not yet issued specific instructions to impacted individuals but is expected to provide updates as the investigation progresses. Users are advised to remain vigilant, monitor for any suspicious activity related to their personal information, and enable two-factor authentication wherever possible.

 Reference link : The Economic Times