The victim's car has not been located. It is a silver Nissan Cefiro with the licence plate CRY691.
A police spokeswoman said the victim suffered minor injuries.
It was initially thought her injuries were much worse but she was now "doing ok".
She said the attack had traumatised the victim.
A woman in the security office at the mall refused to comment.
Centre manager Jonathan Douglas told the Herald he had been notified of the incident.
He confirmed the woman was an employee of Max, a clothing store in Sylvia Park.
"Our thoughts and concerns go out to the victim," he said.
"We are hopeful that through the CCTV footage picked up of the incident and given to the police that the police will quickly find the culprits. This appears a completely random act of violence on an employee of Max and as mentioned our thoughts are with her and her family at this time."
Mr Douglas said security patrols at the mall's carpark areas had been increased.
The manager of the Max store was obviously upset about the incident.
"We don't want to talk about it," she said.
She said the staff member's privacy prevented her commenting, and then hung up the phone.
If you see the car or know who the offenders are call 111 immediately. Information can also be passed on to the Auckland police on 09 304 6400.