Company: ZCARW
Filing Date: 2025-11-14
Form Type: 10-Q
Source: 0001213900-25-110391
Chunk: 661

Company: Zoomcar Holdings, Inc.
Filing Date: 2025-11-14
Form: 10-Q
Item: Part I, Item 3
Chunk 661
---
 software or hardware failures, loss of data or other computer assets, adware, or other
similar issues. Threat actors, nation states, and nation state-supported actors engage in cyberattacks, including for geopolitical reasons,
continued opportunistic monetary reasons, and in connection with military conflicts and operations. During times of war and other major
conflicts, we and our third-party service providers may be vulnerable to these attacks, including cyberattacks that could materially disrupt
our systems, platform, and operations. While we have security measures in place to protect customer information and prevent data loss,
service interruption, and other security breaches, we cannot guarantee that our security measures or our third-party service providers’
security measures will be sufficient to protect against unauthorized access to, or other compromise of, personal information, confidential
information, or proprietary information or of disruptions or damage to our systems. The techniques used to sabotage or to obtain unauthorized
access to our platform, systems, networks, and/or physical facilities in which data is stored or through which data is transmitted change
frequently, and we may be unable to anticipate such techniques or implement adequate preventative measures or stop security breaches that
may arise from such techniques. As a result, our safeguards and preventive measures may not be adequate to prevent current or future cyberattacks
and security incidents, including security breaches that may remain undetected for extended periods of time, which can substantially increase
the potential for a material and adverse impact resulting from the breach.

97

We are required to comply
with laws, rules, industry standards, and regulations that require us to maintain the security of personal information in India. We may
also have contractual and other legal obligations to notify relevant stakeholders of security breaches. Failure to prevent or mitigate
cyberattacks could result and has in the past resulted in unauthorized access to such data, including personal information. India has
enacted laws requiring companies to notify individuals, regulatory authorities, and others of security breaches involving certain types
of data. In addition, our agreements with certain partners may require us to notify them in the event of a security breach. Such disclosures
are and could be costly, could lead to negative publicity, may cause Hosts and Guests to lose confidence in the effectiveness of our
security measures and to not use our services, and may require us to expend significant capital and other resources to respond to and/or
alleviate problems caused by the actual or perceived security breach. In addition, the costs to respond to a cybersecurity event or to
mitigate any identified security vulnerabilities