- Zoomcar has filed a new 8-k form with the dry confirming cyberattack
- He discovered the attack of the actors of the threat
- More than 8 million users could have been stolen their personal data
The car sharing marketplace zoomcar has undergone a cyber attack in which it has lost sensitive information on millions of customers.
In a new 8-K form filed with the Securities and Exchange Commission (SEC) of the United States, the company said that it had been informed of the attack on June 9, 2025, and a later survey determined that threat stakeholders have managed to fly, “a set of limited data containing certain personal information of a subset of around 8.4 million users”.
This includes people’s names, telephone numbers, cars’ recording numbers, postal addresses and email addresses – but at that time, Zoomcar says that it has no reason to believe that financial information, passwords or other sensitive identifiers have been compromised.
No disturbance
Responding to the attack, the company has activated its response plan to incidents and has taken “immediate measures” to contain the threat.
This was apparently too little too late, however, because the company was in fact informed of the incident by the actors of the threat themselves.
Zoomcar said the pirates had contacted “some employees” claiming to have violated, suggesting that they lingered on systems long enough to exfiltrate all the information they were looking for.
It was not explained why the attackers contacted their victims, but it is sure to assume that they asked for a payment in exchange for the deletion of stolen files. T
The wording of the 8-K file suggests that Zoomcar has not paid any ransom. Instead, it implemented “additional guarantees” on the cloud and internal network, increased system monitoring and examined access controls.
In addition, he brought a third -party cybersecurity expert for more in -depth assistance and informed the regulators and the incident police.
“To date, the incident has not resulted in any significant disruption in the company’s operations,” said Zoomcar.
However, the company continues to assess the scope and potential impacts of the event, including legal, financial and reputation considerations, as well as all associated sanitation costs.
Via Techcrunch