Item 1.05 section not located in normalized markdown

**UNITED STATES**

**SECURITIES AND EXCHANGE COMMISSION**

**Washington, D.C. 20549**

**FORM 8-K**

**CURRENT REPORT**

**PURSUANT TO SECTION 13 OR 15(d)**

**OF THE SECURITIES EXCHANGE ACT OF 1934**

**Date of Report (Date of earliest event reported):
9 June 2025**

**ZOOMCAR HOLDINGS, INC.**

**(Exact name of registrant as specified in its
charter)**

Delaware |
001-40964 |
99-0431609 | ||
(State or other jurisdiction ofincorporation) |
(Commission File Number) |
(IRS Employer Identification No.) |

Anjaneya Techno Park, No.147, 1st FloorKodihalli, Bangalore, India |
560008 | |
(Address of principal executive offices) |
(Zip Code) |

**+91****8048821871**

**(Registrant’s telephone number, including
area code)**

**(Former name or former address, if changed since
last report)**

Check the appropriate box below if the Form 8-K is intended to simultaneously satisfy the filing obligation of the registrant under any of the following provisions:

| ☐ | Written communications pursuant to Rule 425 under the Securities Act (17 CFR 230.425) |

| ☐ | Soliciting material pursuant to Rule 14a-12 under the Exchange Act (17 CFR 240.14a-12) |

| ☐ | Pre-commencement communications pursuant to Rule 14d-2(b) under the Exchange Act (17 CFR 240.14d-2(b)) |

| ☐ | Pre-commencement communications pursuant to Rule 13e-4(c) under the Exchange Act (17 CFR 240.13e-4(c)) |

Securities registered pursuant to Section 12(b) of the Act:

Title of each class |
Trading Symbol(s) |
Name of each exchange on which registered | ||
| NA | NA | NA |

Indicate by check mark whether the registrant is an emerging growth company as defined in Rule 405 of the Securities Act of 1933 (§ 230.405 of this chapter) or Rule 12b-2 of the Securities Exchange Act of 1934 (§ 240.12b-2 of this chapter).

Emerging growth company ☒

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

**Item 1.05. Material Event.**

On June 9, 2025, Zoomcar Holdings, Inc. (the “Company”) identified a cybersecurity incident involving unauthorized access to its information systems. The Company became aware of the incident after certain employees received external communications from a threat actor alleging unauthorized access to Company data. Upon discovery, the Company promptly activated its incident response plan.

Based on preliminary findings, the Company determined that an unauthorized third party accessed a limited dataset containing certain personal information of a subset of approximately 8.4 million users, including names, phone numbers, car registration numbers, personal addresses and email addresses associated with such users. At this time, there is no evidence that financial information, plaintext passwords, or other sensitive identifiers were compromised.

In response to the incident, the Company has taken immediate actions to contain the threat and enhance its security posture. These measures include implementing additional safeguards across the cloud and internal network, increasing system monitoring, and reviewing access controls. The Company is also engaging with third-party cybersecurity experts to further assist with the investigation. The Company has also notified the appropriate regulatory and law enforcement authorities and is cooperating fully with their inquiries.

To date, the incident has not resulted in any material disruption to the Company’s operations. However, the Company continues to evaluate the scope and potential impacts of the event, including legal, financial, and reputational considerations, as well as any associated remediation costs.

**Forward-Looking Statements**

This report contains “forward-looking statements” within the meaning of the “safe harbor” provisions of the Private Securities Litigation Reform Act of 1995, including but not limited to, statements