Coupang Data Breach and $1.2 Billion Customer Trust Initiative

Coupang, South Korea's largest online retailer, suffered a major data breach that exposed the personal information of 33.7 million customers. The breach was traced to a former developer, a Chinese national, who stole the data and attempted to extort the company by threatening to leak the information unless paid. After the breach was discovered, the perpetrator destroyed his laptop, disposed of it in a river, and fled the country. Coupang responded by hiring Mandiant, Palo Alto Networks, and Ernst & Young to assist with the investigation and digital forensics, and worked closely with the South Korean government to secure a confession and recover evidence.

In response to the incident, Coupang announced a $1.2 billion voucher program aimed at restoring customer trust, though critics have argued that the vouchers, redeemable only with Coupang, serve more as a marketing tactic than genuine compensation. The company publicly acknowledged the breach shortly after discovery and has been transparent about its cooperation with authorities and the steps taken to address the fallout. The investigation included the analysis of recovered computing devices and hard drives, which were handed over to government investigators for further examination.