SEC Form 8-K Item 1.05 (material cybersecurity incidents) Primary notice
Disclosed in an 8-K filed June 13, 2025, on SEC EDGAR.
- Organization as reported
- Zoomcar Holdings, Inc.
- Category as reported
Item 1.05 Material Cybersecurity Incidents
- Notice date as reported
- June 9, 2025
- Filing date
- June 13, 2025
- Observed by BreachRecords
- 2026-10-18 20:32 UTC (revision 8074, doc:ea0245724-8k_zoomcar.htm)
- Archived copy
- Held in the private archive (provenance)
Material Event. On June 9, 2025, Zoomcar Holdings, Inc. (the “Company”) identified a cybersecurity incident involving unauthorized access to its information systems. The Company became aware of the incident after certain employees received external communications from a threat actor alleging unauthorized access to Company data. Upon discovery, the Company promptly activated its incident response plan. Based on preliminary findings, the Company determined that an unauthorized third party accessed a limited dataset containing certain personal information of a subset of approximately 8.4 million users, including names, phone numbers, car registration numbers, personal addresses and email addresses associated with such users. At this time, there is no evidence that financial information, plaintext passwords, or other sensitive identifiers were compromised. In response to the incident, the Company has taken immediate actions to contain the threat and enhance its security posture. These measures include implementing additional safeguards across the cloud and internal network, increasing system monitoring, and reviewing access controls. The Company is also engaging with third-party cybersecurity experts to further assist with the investigation. The Company has also notified the appropriate regulatory and law enforcement authorities and is cooperating fully with their inquiries. To date, the incident has not resulted in any material disruption to the Company’s operations. However, the Company continues to evaluate the scope and potential impacts of the event, including legal, financial, and reputational considerations, as well as any associated remediation costs. Forward-Looking Statements This report contains “forward-looking statements” within the meaning of the “safe harbor” provisions of the Private Securities Litigation Reform Act of 1995, including but not limited to, statements regarding the Company’s expectations regarding the incident disclosed and its impact on…