Zoomcar Holdings, Inc. disclosed on a Form 8-K Item 1.05 that on June 9, 2025 it identified a cybersecurity incident in which an unauthorized third party accessed a limited dataset containing personal information of approximately 8.4 million users, including names, phone numbers, car registration numbers, addresses, and email addresses. The company became aware after employees received external communications from a threat actor. No financial information or plaintext passwords were reportedly compromised. The company activated its incident response plan and notified regulators and law enforcement.
Affected (this filing): 8,400,000