Search
Breach tracker

Breach report

Cars24 alleges 3,100 customer records were stolen and sold to a rival

ConfirmedDisclosed Report published IndiaRetailBy Vivek Kumar
Records 3.1K (company's complaint)Cause Data theft

In a police complaint, the used-car platform says customer names, phone numbers and vehicle details were taken between March and August and passed to a rival business. An FIR names five people.

What happened

Cars24, the used-car platform, has alleged that confidential information on about 3,100 customers was stolen and supplied to a rival business and outside dealers, The420.in reported on 4 September 2026. A case was registered at a Cyber Crime Police Station on a complaint from the company's legal head, and five people are named in the FIR.

According to the complaint, the data was taken between March and August and supplied to a Punjab-based car dealing business. Cars24 says WhatsApp conversations found during its own internal inquiry show customer leads being offered for about ₹1,000 each. The company says it noticed the problem when people linked to another business began calling Cars24 customers.

What was exposed

According to the complaint as reported: customer names, mobile numbers, vehicle details, appointments, inspection reports, pricing information, sales leads and other internal business records. Cars24 puts its estimated commercial loss at ₹5.70 crore. The reports do not mention payment card, bank account or identity document data.

Confirmed vs. claimed

Alleged by Cars24 in its police complaint: about 3,100 customer records taken; leads sold for about ₹1,000 each; an estimated loss of ₹5.70 crore.

Not yet established: police are examining how the data left the company's systems, who had access to it and whether other dealers received it. The loss estimate has not been independently checked by police, and the allegations against the five named people have not been proven. We found no public statement or customer notice from Cars24.

What to do if you are affected

  • If you booked an inspection or listed a car with Cars24 this year and then got calls from other dealers who already knew your car, price or appointment, this may be why. You do not have to deal with them.
  • Never pay a "token amount" or share an OTP with a caller who says they want to buy your car. Confirm any offer through the Cars24 app.
  • Be wary of callers who know your vehicle details and push for quick payment or for copies of your RC or Aadhaar.
  • If you lose money, call 1930 or report at cybercrime.gov.in.

Sources

We do not link to leak sites or reproduce leaked data. Spotted an error? Request a correction.

More breaches in India