JD.com Data Breach Exposed 141 Million User Accounts in 2013

In early 2013, JD.com, one of China’s leading e-commerce platforms, suffered a major data breach that impacted over 141 million user accounts. Personal information such as full names, usernames, email addresses, phone numbers, and hashed passwords were exposed. JD.com was rapidly growing at the time, serving millions of customers and managing huge volumes of transactions. The breach raised significant concerns over the safety of customer data held by online retailers and had far-reaching implications for the platform’s user base.

What Happened in the JD.com Breach?

The security breach resulted in the unauthorized access and leak of sensitive user information collected by JD.com. Attackers were able to obtain a database that contained private account details of millions of users. The passwords in the breached data were hashed using SHA-1, a security measure common at the time. Nevertheless, the exposure of so much personal information left users vulnerable to phishing and other targeted threats.

How Many Users Were Impacted?

The JD.com breach stands out as one of the largest online retailer data exposures in China, affecting 141,638,093 user accounts. The huge scale meant that a significant portion of the platform’s user population was at risk, making this breach one of the most talked-about incidents in e-commerce data security.

What Information Was Leaked?

Full names
Usernames
Hashed passwords (SHA-1)
Email addresses
Phone numbers

This combination of personal and login information could have been used in a variety of malicious ways, especially if users reused passwords elsewhere.

Timeline of the JD.com Data Breach

Early 2013: Unauthorized parties gained access to user data from JD.com.
Date of breach: January 1, 2013 (approximate incident timeline based on available records).
Public awareness: News of the breach and the scale of the exposed data became more widely known in the months following the incident.

FAQ about the JD.com Data Breach

What happened in the JD.com breach?

The JD.com data breach involved unauthorized access to and leak of personal user information, including names, usernames, hashed passwords, emails, and phone numbers for more than 141 million users in 2013.

How many JD.com accounts were affected in the 2013 breach?

The breach exposed the information of approximately 141,638,093 JD.com user accounts.

What data was leaked in the JD.com data breach?

Compromised data included full names, usernames, email addresses, phone numbers, and hashed passwords (using SHA-1).

When did the JD.com data breach happen?

The incident took place in early 2013, with the breach date recorded as January 1, 2013.

How can I check if I'm in the JD.com data breach?

You can check if your information was part of the JD.com breach by utilizing the DeHashed search engine.