Car sharing giant Zoomcar says hacker accessed personal data of 8.4 million users

Zoomcar, a prominent player in the Indian car-sharing industry, has disclosed a significant data breach affecting approximately 8.4 million customers. The breach exposed sensitive information, including names, phone numbers, and vehicle registration details. The Bengaluru-based company reported that it became aware of the unauthorized access to its information systems on June 9, as detailed in a filing with the U.S. Securities and Exchange Commission. The alarm was raised when some employees received communications from an individual claiming to be a hacker who had infiltrated the company's data. In response to this alarming incident, Zoomcar swiftly activated its incident response plan. The company reassured stakeholders that there was no evidence suggesting that financial details, plaintext passwords, or other critical identifiers were compromised in the breach. To mitigate the impact, Zoomcar has implemented additional security measures across its cloud and internal networks. These enhancements include increased system monitoring and a review of access controls. However, specific details regarding these safeguards have not been disclosed. The company is currently collaborating with third-party cybersecurity experts and has notified the relevant regulatory and law enforcement authorities, ensuring full cooperation with ongoing investigations. As of now, Zoomcar has not confirmed whether it has communicated with affected customers or provided any information regarding the identity of the hacker. Founded in 2013, Zoomcar offers flexible car rental options—monthly, weekly, daily, and hourly—and operates in 99 cities with a fleet exceeding 25,000 vehicles. With over 10 million users, the company also has a presence in Egypt, Indonesia, and Vietnam. Recent reports indicated a 19% year-on-year increase in car rentals, with bookings reaching 103,599. Despite the breach, Zoomcar stated that there has been no significant disruption to its operations.