Company: ZCARW
Filing Date: 2025-05-05
Form Type: S-1
Source: 0001213900-25-039778
Chunk: 64

Company: Zoomcar Holdings, Inc.
Filing Date: 2025-05-05
Form: S-1
Chunk 64
---
 lose Hosts or Guests, and our business and operating results could be adversely affected. From time to time, and especially in 2018, we have experienced security incidents or attempted attacks, and in some instances, individuals have had their personal information compromised. We conduct investigations when we become aware of such incidents and/or attempted attacks (although our investigations may not be able to determine the method of attack) and may notify affected persons, as necessary. In addition to traditional computer “hackers” employing malicious code (such as viruses, worms, and ransomware) to breach our systems and platform, we are susceptible to and monitor for social engineering, cyber extortion, and personnel theft or misuse. We may also be the subject of denial-of-service attacks, server malfunction, software or hardware failures, loss of data or other computer assets, adware, or other similar issues. Threat actors, nation states, and nation state-supported actors engage in cyberattacks, including for geopolitical reasons, continued opportunistic monetary reasons, and in connection with military conflicts and operations. During times of war and other major conflicts, we and our third-party service providers may be vulnerable to these attacks, including cyberattacks that could materially disrupt our systems, platform and operations. While we have security measures in place to protect customer information and prevent data loss, service interruption, and other security breaches, we cannot guarantee that our security measures or our third-party service providers’ security measures will be sufficient to protect against unauthorized access to, or other compromise of, personal information, confidential information, or proprietary information or of disruptions or damage to our systems. The techniques used to sabotage or to obtain unauthorized access to our platform, systems, networks, and/or physical facilities in which data is stored or through which data is transmitted change frequently, and we may be unable to anticipate such techniques or implement adequate preventative measures or stop security breaches that may arise from such techniques. As a result, our safeguards and preventive measures may not be adequate to prevent current or future cyberattacks and security incidents, including security breaches that may remain undetected for extended periods of time, which can substantially increase the potential for a material and adverse impact resulting from the breach. 30 We are required to comply with laws, rules, industry standards, and regulations that require us to maintain the security of personal information in India. We may also have contractual and other legal obligations to notify relevant stakeholders of security breaches. Failure to prevent or mitigate cyberattacks could result and has in the past resulted in unauthorized access to such data, including personal information. India has