2013 jd — Have I Been Pwned verified incident: JD
Data compromised
Email addresses, Passwords, Phone numbers, Usernames
Technical writeup
In 2013 (exact date unknown), the Chinese e-commerce service JD suffered a data breach that exposed 13GB of data containing 77 million unique email addresses. The data also included usernames, phone numbers and passwords stored as SHA-1 hashes. BreachHistory indexes the Have I Been Pwned (HIBP) corpus for third-party breach disclosure and victim notification context; treat record counts and fields as disclosed in that source at time of indexing.
Root cause
Variations by incident; see HIBP narrative and linked disclosures where present.