Zoomcar Holdings, Inc.
bd_8e398ea4d67615f9 · schema v1 · pii pii-v1
Full breach record for Zoomcar Holdings, Inc. →Zoomcar Holdings, Inc. disclosed on a Form 8-K Item 1.05 that on June 9, 2025 it identified a cybersecurity incident in which an unauthorized third party accessed a limited dataset containing personal information of approximately 8.4 million users, including names, phone numbers, car registration numbers, addresses, and email addresses. The company became aware after employees received external communications from a threat actor. No financial information or plaintext passwords were reportedly compromised. The company activated its incident response plan and notified regulators and law enforcement.
Source provenance
- Source URL
- https://www.sec.gov/Archives/edgar/data/1854275/000121390025054319/ea0245724-8k_zoomcar.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Jun 13, 2025
- Raw hash
- 5f0dd63618bce1dac24b1e2b4faec40901b0361d1156915cfc5a2f29af11965a
Source filing
Reporting entity
- Name
- Zoomcar Holdings, Inc.norm: zoomcar holdings
- SEC CIK
- 0001854275
- Domain
- zoomcar.com
Victim entity
- Name
- Zoomcar Holdings, Inc.norm: zoomcar holdings
- SEC CIK
- 0001854275
- Domain
- zoomcar.com
- Industry
- Transportation & LogisticsllmTechnologyllmNAICS 532111 · Passenger Car Rental
Incident
- Discovered
- Jun 9, 2025
- Materiality determined
- Jun 9, 2025
- Notification sent
- —
- Affected individuals
- 8,400,000
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- Threat actor
- External
- Regulator citations
- Notified appropriate regulatory and law enforcement authorities and is cooperating fully with their inquiries
Compliance
- Time to disclose
- 4 days(4 days from discovery to filing)
- Compliance flags
- SEC 4-day OK · 4d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status SEC Materiality determined: Jun 9, 2025→ Filed: Jun 13, 20254d cal. 4 business days SEC 4-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.