South Korea fines Coupang record $480 million for massive data breach
South Korea’s Personal Information Protection Commission imposed a record 624.7 billion won (~$480 million) fine on e-commerce giant Coupang for a data breach affecting up to 37.55 million users. A former employee improperly accessed personal data (names, emails, phone numbers, addresses) over months without detection, due to weak security practices. The fine, the largest ever for a data privacy violation in South Korea, sparked a diplomatic dispute with the US after an investor urged a trade probe. Coupang plans to appeal.
Cross-source coverage
Wire timeline
Coupang (CPNG) Jumps on $410M Penalty Appeal
Coupang Inc. (NYSE: CPNG) saw its share price jump 5.25% on Tuesday to close at $18.03, as investors reacted to the company's appeal against a $410 million penalty imposed by South Korea's Personal Information Protection Commission (PIPC) over a data breach. The penalty is the largest ever imposed by the PIPC, surpassing previous fines against SK Telecom and KT. Coupang expressed regret that its proactive measures and explanations were not fully reflected in the decision, and expects the facts to be clarified through legal procedures. The data breach reportedly occurred as early as June last year but was only discovered five months later. Coupang, often called the Amazon of South Korea, holds over a third of the country's e-commerce market share.
Yahoo FinanceSouth Korea issues Won624.68bn fine on Coupang over data breach
South Korea's Personal Information Protection Commission (PIPC) has imposed a record penalty surcharge of Won624.68 billion ($411.19 million) on e-commerce giant Coupang for a massive personal data breach. The fine, the largest ever in South Korea for a data breach, includes Won423.6 billion for leaking customer data and Won201.1 billion for unauthorized collection of personal information. The breach compromised the personal details of approximately 37.55 million users, including names, email addresses, phone numbers, and home addresses, occurring between April and November 2025. Investigators attributed the breach to weak security practices, including poor handling of authentication keys and insufficient access controls, rather than a sophisticated cyberattack. Coupang expressed regret but indicated it plans to contest the penalty through legal channels. The company's former CEO, Park Dae-joon, resigned in December 2025 following the breach's fallout.
Yahoo FinanceSouth Korea fines Coupang record $409 million for data breach
South Korea's Personal Information Protection Commission fined Coupang Corp., the South Korean entity of US-listed e-commerce giant Coupang Inc., a record 624.7 billion won ($409 million) for a major data breach. The breach involved a former employee improperly accessing personal information from nearly 34 million accounts, roughly two-thirds of South Korea's population, undetected for months. Regulators cited inadequate safety management and negligent oversight. The fine is the largest ever for a personal data breach in South Korea, surpassing a previous penalty on SK Telecom. The incident escalated into a diplomatic dispute with the US after major investor Greenoaks Capital Partners urged a US trade probe, alleging discriminatory treatment. South Korean lawmakers pushed back against what they called US political pressure. Coupang expressed regret and plans to challenge the ruling in court. The company also warned of a 2026 revenue slowdown after issuing customer vouchers in response to the breach.
Fortune | FORTUNESouth Korea fines Coupang record 624.7 billion won for data leak
South Korea has imposed a record fine of 624.7 billion won (approximately $480 million) on US-based e-commerce giant Coupang for a massive data leak. The penalty follows an investigation that revealed a former employee improperly accessed personal information from nearly 34 million accounts, a breach that went undetected for months. Coupang, which is widely popular in South Korea, faces significant regulatory and reputational consequences as a result of this incident.
The Business TimesSouth Korea fines Coupang record 624.7 billion won for data leak
South Korea has imposed a record fine of 624.7 billion won (approximately $480 million) on e-commerce giant Coupang for a massive data leak. The penalty follows an investigation that revealed a former employee improperly accessed personal information from nearly 34 million accounts, a breach that went undetected for months. Coupang, which is based in the US but widely popular in South Korea, has faced significant regulatory scrutiny over the incident. The fine is the largest ever levied by South Korean authorities for a data privacy violation, highlighting the country's strict enforcement of data protection laws. The article, published by The Business Times on June 11, 2026, notes that the breach involved unauthorized access to sensitive customer data, raising concerns about corporate data security practices.
The Business Times