Loading story…
South Korean police are investigating a major Coupang customer data breach impacting roughly 33.7 million (i.e., more than 30 million) accounts, with exposed data reported to include names, email addresses, and other personal details. Authorities indicated the case outline is nearing completion, including the suspected method of access, and are also probing a former Coupang employee believed to have played a key role in the incident.
The investigation has expanded to potential obstruction and evidence tampering tied to Coupang’s internal handling of the breach. Interim/acting CEO Harold Rogers was questioned/summoned multiple times as police examine whether Coupang destroyed or concealed evidence or otherwise disrupted the government inquiry, including scrutiny of whether the company’s own forensic review interfered with law enforcement efforts. Police also recovered a smashed laptop from a river allegedly weighted with bricks, which investigators believe may be connected to attempts to destroy evidence; Coupang has said it is cooperating and has denied negligence and related allegations.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
4 events from the most recent confirmed update back to the earliest known activity.
Seoul police questioned Coupang Korea interim CEO Harold Rogers as part of an investigation into whether the company destroyed or concealed evidence and whether its internal forensic review interfered with the official probe. Rogers said Coupang would fully cooperate, and reports noted he had previously missed two summonses.
South Korean police said their investigation found that the breach actually affected more than 30 million accounts, with one report putting the figure at 33.7 million. Exposed data included names, email addresses, and other personal information.
In December, South Korean police recovered a smashed laptop from a river that they allege was intentionally destroyed to eliminate evidence related to the Coupang breach investigation. The recovery became part of the broader probe into possible obstruction and evidence tampering.
Coupang disclosed a data breach in November and said its internal investigation found that roughly 3,000 accounts were impacted. The company attributed the incident to a former employee who discarded data from the most accessed accounts.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
South Korean e-commerce giant Coupang suffered a major data breach after a former employee stole a security key and accessed the personal information of approximately 33.7 million customers. The perpetrator used both a PC and a MacBook Air to access customer records, including order histories and building access codes, and later attempted to destroy evidence by smashing the MacBook and throwing it into a river. Despite these efforts, investigators recovered the device and linked it to the accused through its serial number. Coupang worked with forensic experts and law enforcement to investigate the breach, and the company has faced criticism over its handling of the incident and the adequacy of its response. In response to the breach, Coupang announced a compensation plan totaling 1.69 trillion won (about $1.17 billion), offering purchase vouchers to affected customers, including those who closed their accounts after the incident. The company publicly acknowledged its responsibility and expressed regret for the distress caused, while also defending its cooperation with authorities and the thoroughness of its investigation. The compensation scheme, however, has drawn criticism for being limited to Coupang's own services, with some officials accusing the company of leveraging the crisis for business gain. The incident has led to executive changes within Coupang and increased scrutiny from government agencies and the public.
Jun 29, 2026
Coupang, South Korea’s largest online retailer, suffered a massive data breach that compromised the personal information of nearly 34 million customers. The breach, which was revealed in mid-November, led to the resignation of CEO Park Dae-jun, who cited a deep sense of responsibility for the incident and its aftermath. Coupang’s parent company appointed Harold Rogers as interim CEO, with a stated focus on restoring customer trust and stabilizing the organization. The breach has intensified scrutiny of cybersecurity practices in South Korea, a country already noted for frequent data security incidents. In response to the breach, Seoul Metropolitan Police cyber investigators raided Coupang’s headquarters, seizing devices and data to determine the cause and scope of the incident. Authorities believe the perpetrator was a Chinese former employee with privileged access, who allegedly used a stolen private encryption key to forge authentication tokens and access customer data. The incident has sparked political debate over the adequacy of South Korea’s data protection laws and raised concerns among investors, especially after it was revealed that senior executives sold shares in a preplanned sale shortly before the breach was publicly disclosed.
Jun 29, 2026
South Korean authorities escalated their response to a massive **Coupang** data breach that exposed personal information tied to about **34 million users**, with the Personal Information Protection Commission investigating possible violations and weighing penalties reportedly reaching **$770 million**. Regulators also warned the e-commerce company could face a **business suspension**, while police repeatedly searched company offices and examined whether the breach involved insider activity and possible overseas data leakage. One report said investigators identified a **former Chinese employee** as a suspect, while officials said no malware had been found and did not rule out a state-backed angle. The fallout reached Coupang's top leadership as the company's CEO resigned over the incident and police considered an **overseas travel ban** on senior executives. Investigators later questioned Coupang's interim chief for **12 hours** as part of the criminal probe, and South Korean police said they would continue examining management responsibility for the breach and the company's handling of user data. The case also drew political attention abroad after a U.S. lawmaker accused Korean regulators of taking **"discriminatory"** action against Coupang, underscoring how the breach has become both a major privacy enforcement case and a high-profile corporate governance crisis.
Jul 12, 2026