Ecommerce Giant JD Apologizes for Leak Exposing User Data

Chinese e-commerce giant JD has apologized for a user data leak in an official announcement on Sunday. The data leak exposed millions of users’ user names, passwords, email addresses, QQ accounts, ID numbers, and phone numbers.

JD claims that the leak actually took place in 2013. They attribute it to a security loophole in Apache Struts 2, an open-source web application framework used widely by Internet companies and governments.

JD claims to have notified at-risk customers to update their accounts after detecting and closing the security holes.

What you get

Full access to all premium content and our full archives

Members'-only newsletters

Preferential access and discounts to all TechNode events

Direct access to the TechNode newsroom