What was exposed, when it happened, and which databases confirm it.
- accounts
- 7,176,022
- Breached
- July 1, 2018
- Last Update
- June 5, 2020
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In July 2018, the Indian self-drive car rental company Zoomcar suffered a data breach which was subsequently sold on a dark web marketplace in 2020. The breach exposed over 3.5M records including names, email and IP addresses, phone numbers and passwords stored as bcrypt hashes. The data was provided to HIBP by dehashed.com.
Compromised Info
- Email addresses
- IP addresses
- Names
- Passwords
- Phone numbers
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- LeakCheck— linked via automatic string matching
- Dehashed— linked via domain matching
- HIBP
FAQ
What was leaked in the Zoomcar breach?
The Zoomcar breach exposed: Email addresses, IP addresses, Names, Passwords, and Phone numbers.
When did the Zoomcar breach happen?
The Zoomcar breach was disclosed on July 1, 2018 and affected 7,176,022 records.
Am I affected by the Zoomcar breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the Zoomcar leak.