🔥 Trending South Korea Faces Scrutiny Over Coupang Data Breach Allegations

The South Korea Coupang data breach refers to a significant cybersecurity incident that occurred in late 2025, affecting Coupang, South Korea's largest online retailer. This breach exposed the personal information of tens of millions of customers, making it one of the largest cybersecurity incidents in the country's history ²⁸.

Scope and Impact of the Breach

The data breach involved the unauthorized access to and exposure of personal information belonging to approximately 33.7 million Coupang customer accounts ²⁴⁶. Some reports even suggest the number could be as high as 34 million local customer accounts ¹⁷, or over 37 million people when including non-Coupang customers whose data was also exposed ¹⁰. This figure represents nearly the company's entire user base ².

The exposed information included sensitive details such as:

• Customer names ⁵
• Contact details ⁵
• Delivery addresses ⁵
• Order histories ⁵

Timeline and Response

Coupang publicly apologized for the incident in late 2025, acknowledging the massive scale of the breach ⁴⁸⁹. The South Korean government responded swiftly, with the Personal Information Protection Commission (PIPC) launching an investigation.

Government Actions and Penalties

In June 2026, the South Korean government fined Coupang approximately $400 million (or 540 billion South Korean won) for its role in the data breach ⁵. This fine underscored the seriousness with which the government viewed the incident and the company's responsibility in protecting customer data.

Compensation Efforts

In December 2025, Coupang announced a compensation plan for the affected users. The company stated it would offer 1.69 trillion South Korean won (approximately $1.17 billion USD) in compensation to the 34 million users impacted by the breach ⁷.

Broader Implications

The Coupang data breach raised significant questions about data security practices, particularly for large e-commerce platforms. It also highlighted jurisdictional complexities, as Coupang is based in Seattle, Washington, despite its primary operations in South Korea ³. The incident prompted a sweeping response from the South Korean government, emphasizing the importance of robust cybersecurity measures for companies handling vast amounts of personal data ³.