Indian car-sharing market Zoomcar has revealed {that a} hacker accessed the non-public knowledge of at the very least 8.4 million clients, together with their names, cellphone numbers, and automotive registration numbers.
The Bengaluru-headquartered firm recognized the incident involving unauthorized entry to its info techniques on June 9, per its submitting with the U.S. Securities and Exchange Commission. The firm acknowledged that it turned conscious of the incident after a few of its staff obtained exterior communications from a risk actor who claimed to have gained entry to the corporate’s knowledge.
“Upon discovery, the corporate promptly activated its incident response plan,” stated Zoomcar in its submitting.
The firm stated there was “no proof that monetary info, plaintext passwords, or different delicate identifiers” had been compromised within the breach.
Responding to the incident, Zoomcar stated it applied “further safeguards throughout the cloud and inner community, growing system monitoring, and reviewing entry controls,” with out offering additional particulars. The firm additionally acknowledged that it’s partaking with third-party cybersecurity consultants and has notified “applicable regulatory and regulation enforcement authorities and is cooperating totally with their inquiries.”
However, Zoomcar has not but stated if it has knowledgeable affected clients concerning the incident, and whether or not it has any details about the hacker.
TechCrunch has reached out to Zoomcar, asking these questions and extra, and can replace this text when the corporate responds.
Founded in 2013, Zoomcar permits clients to hire vehicles on a month-to-month, weekly, day by day, and hourly foundation. The firm operates in 99 cities with over 25,000 vehicles and has greater than 10 million customers, per the info accessible on its investor relations web site. In addition to India, the corporate operates in Egypt, Indonesia, and Vietnam.
In February, Zoomcar reported a 19% year-on-year enhance in automotive leases to 103,599 bookings. Contribution revenue jumped over 500% to $1.28 million, whereas internet loss stood at $7.9 million.
“To date, the incident has not resulted in any materials disruption to the corporate’s operations,” the corporate stated.
