Indian car-sharing market Zoomcar has revealed {that a} hacker accessed the non-public knowledge of at the least 8.4 clients, together with their names, cellphone numbers, and automobile registration numbers.
The Bengaluru-headquartered firm recognized the incident involving unauthorized entry to its info techniques on June 9, per its filing with the U.S. Securities and Trade Fee. The corporate acknowledged that it turned conscious of the incident after a few of its staff obtained exterior communications from a risk actor who claimed to have gained entry to the corporate’s knowledge.
“Upon discovery, the corporate promptly activated its incident response plan,” mentioned Zoomcar in its submitting.
The corporate mentioned there was “no proof that monetary info, plaintext passwords, or different delicate identifiers” have been compromised within the breach.
Responding to the incident, Zoomcar mentioned it applied “further safeguards throughout the cloud and inside community, rising system monitoring, and reviewing entry controls,” with out offering additional particulars. The corporate additionally acknowledged that it’s partaking with third-party cybersecurity specialists and has notified “acceptable regulatory and regulation enforcement authorities and is cooperating absolutely with their inquiries.”
Nevertheless, Zoomcar has not but mentioned if it has knowledgeable affected clients in regards to the incident, and whether or not it has any details about the hacker.
TechCrunch has reached out to Zoomcar, asking these questions and extra, and can replace this text when the corporate responds.
Based in 2013, Zoomcar permits clients to lease automobiles on a month-to-month, weekly, day by day, and hourly foundation. The corporate operates in 99 cities with over 25,000 automobiles and has greater than 10 million customers, per the data available on its investor relations website. Along with India, the corporate operates in Egypt, Indonesia, and Vietnam.
In February, Zoomcar reported a 19% year-on-year enhance in automobile leases to 103,599 bookings. Contribution revenue jumped over 500% to $1.28 million, whereas web loss stood at $7.9 million.
“Thus far, the incident has not resulted in any materials disruption to the corporate’s operations,” the corporate mentioned.