Company: ZCARW
Filing Date: 2025-06-30
Form Type: 10-K
Source: 0001213900-25-059675
Chunk: 350

Company: Zoomcar Holdings, Inc.
Filing Date: 2025-06-30
Form: 10-K
Item: Item 1A
Chunk 350
---
 our platform, systems, networks, and/or physical facilities in which data is stored or through which data is transmitted change
frequently, and we may be unable to anticipate such techniques or implement adequate preventative measures or stop security breaches
that may arise from such techniques. As a result, our safeguards and preventive measures may not be adequate to prevent current or future
cyberattacks and security incidents, including security breaches that may remain undetected for extended periods of time, which can substantially
increase the potential for a material and adverse impact resulting from the breach.

39

We are required to comply
with laws, rules, industry standards, and regulations that require us to maintain the security of personal information in India. We may
also have contractual and other legal obligations to notify relevant stakeholders of security breaches. Failure to prevent or mitigate
cyberattacks could result and has in the past resulted in unauthorized access to such data, including personal information. India has
enacted laws requiring companies to notify individuals, regulatory authorities, and others of security breaches involving certain types
of data. In addition, our agreements with certain partners may require us to notify them in the event of a security breach. Such disclosures
are and could be costly, could lead to negative publicity, may cause Hosts and Guests to lose confidence in the effectiveness of our
security measures and to not use our services, and may require us to expend significant capital and other resources to respond to and/or
alleviate problems caused by the actual or perceived security breach. In addition, the costs to respond to a cybersecurity event or to
mitigate any identified security vulnerabilities could be significant, including costs for remediating the effects of such an event,
paying a ransom, restoring data from backups, and conducting data analysis to determine what data may have been affected by the breach.
In addition, our efforts to contain or remediate a security breach or any system vulnerability may be unsuccessful, and our efforts and
any related failures to contain or remediate any breach or vulnerabilities could result in interruptions, delays, loss in customer trust,
harm to our reputation, and increases in our insurance premiums.

We do not currently have
insurance coverage for security incidents or breaches, including fines, judgments, settlements, penalties, costs, attorney fees, and
other impacts that arise out of incidents or breaches. While we may obtain cyber liability insurance in the future, we cannot assure
you that such insurance coverage will adequately cover liabilities actually incurred or that insurance will continue to be available
to us on economically