A 12G data package belonging to JD.com, a leading online retail¹ platform in China, has reportedly been leaked.

据报道，中国著名网购平台京东的12G数据信息包遭到泄露。

The package contains tens of millions of pieces of personal data, including user names, passwords, email addresses and IDs, according to a report by Jiemian News.

据《界面新闻》报道，泄露的信息中含有数千万条个人信息，包括用户名、密码、邮件地址和身份证号。

In an announcement on Dec. 11, JD.com said the leak originated from a Struts² 2 vulnerability in 2013, and the company has fixed³ the problem.

在12月11日的一份声明中，京东方面表示，此次信息泄露的源头是公司在2013年留下的一个Struts 2漏洞，目前他们已经修复了这一问题。

The announcement further suggested that users activate⁴ mobile certification and payment codes, and update and strengthen their login passwords.

此外，该声明还建议用户激活手机认证和支付代码，并且修改登陆密码、提高密码的安全性。

This is the second time that JD.com has been involved in a user information leak.

这已经是京东第二次卷入用户信息泄露事件中了。

In 2015, three employees of JD.com sold a total of 9,313 pieces of information, including names, telephone numbers and addresses, for between 0.3 RMB and 1.5 RMB per piece.

2015年，3名京东员工出售了包括用户姓名、电话号码和地址在内的共9313条信息，每条信息售价0.3元到1.5元不等。