Zoomcar Data Breach Exposes Personal Information of 8.4 Million Users
Jun 16, 2025

Zoomcar Data Breach Exposes Personal Information of 8.4 Million Users

AI-summarised brief · reviewed before publication

Car-sharing platform Zoomcar disclosed a significant data breach on June 16, 2025, revealing that a hacker gained unauthorized access to the personal data of approximately 8.4 million users. The breach, detailed in a company statement, compromised sensitive information including names, email addresses, phone numbers, and, in some cases, payment details and driving license numbers. The breach was discovered during a routine security audit, prompting Zoomcar to engage cybersecurity experts to investigate the scope of the incident. The company believes the hacker exploited a vulnerability in its system, though specifics about the flaw were not disclosed. Zoomcar has since patched the vulnerability and is implementing enhanced security measures to prevent future attacks. Affected users are being notified via email and urged to monitor their accounts for suspicious activity, change passwords, and enable two-factor authentication where possible. Zoomcar has also set up a dedicated support line and website for users seeking assistance or information about the breach. The incident raises concerns about data security in the car-sharing industry, where companies handle vast amounts of personal and financial information. Zoomcar, one of the largest players in the market, operates in multiple countries and has faced scrutiny over its data protection practices in the past. In response to the breach, Zoomcar’s CEO issued an apology, emphasizing the company’s commitment to transparency and user trust. “We deeply regret this incident and are taking every step to protect our users and prevent this from happening again,” the statement read. Authorities have been notified, and Zoomcar is cooperating with regulatory bodies to address potential violations of data protection laws. Cybersecurity analysts warn that the stolen data could be used for identity theft, phishing scams, or sold on the dark web, underscoring the urgency for affected users to take protective measures. The breach comes at a challenging time for Zoomcar, which has been navigating increased competition and economic pressures in the mobility sector. The company’s handling of the incident will likely influence user confidence and its reputation moving forward. Zoomcar has advised users to remain vigilant and report any unusual activity to the company or local authorities immediately.