Zoomcar

Disclosed Jun 5, 20203,589,795 accountsUnverified

In July 2018, the Indian self-drive car rental company Zoomcar suffered a data breach which was subsequently sold on a dark web marketplace in 2020 . The breach exposed over 3.5M records including names, email and IP addresses, phone numbers and passwords stored as bcrypt hashes. The data was provided to HIBP by dehashed.com .

What is known

People affected	3,589,795 (accounts in the leaked data, per Have I Been Pwned)
Disclosed	Jun 5, 2020
Happened	Jul 1, 2018
Attack	Not stated
Data exposed	EmailsIP addressesNamesPasswordsPhone numbers
Sector	Tech
Status	Unverified: not yet confirmed by an official notice, a filing or the organization
Check your email	Have I Been Pwned

Sources

Aggregatorhaveibeenpwned.com

Have I Been Pwned: Zoomcar

Notices filed

Accounts in the dataJun 5, 2020

Have I Been Pwned3,589,795 people

Other breaches at Zoomcar

Hacker accesses personal data of 8.4 million Zoomcar usersHacking exposed names and phone numbers.Hacking8.4M affectedTransportINJun 13, 2025

History of this record

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Zoomcar