PHP Vulnerability Responses by Company

JD Sports Fashion Plc

Companies / web services
Aliases / services
JD Sports / JDスポーツ / Size? / JD Sports Fashion Plc
Official website
https://www.jdplc.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

JD and other announced brands’ November 2018–October 2020 orders

Response status
Not listed
Response information checked
2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

The January 30, 2023 notice reports possible access to approximately 10 million customers’ names, contacts, orders and last four card digits. Full card details were not held; JD reported no reason to believe passwords were accessed.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Watch for fraudulent emails, calls and texts impersonating JD or affected brands; follow the affected-customer notice.

Official service URL

Source URLs

  1. Operator and company informationhttps://www.jdplc.com/cyber-security-incident-regarding-historic-orders/Service and operation documentation
Related official sources
  1. Operator and company informationOfficial information directoryIdentifies JD Sports Fashion Plc and the stated service scope.
  2. Historic online orders incident, January 30, 2023Official information directoryThe January 30, 2023 notice reports possible access to approximately 10 million customers’ names, contacts, orders and last four card digits.

Comments