Loading story…
South Korean authorities escalated their response to a massive Coupang data breach that exposed personal information tied to about 34 million users, with the Personal Information Protection Commission investigating possible violations and weighing penalties reportedly reaching $770 million. Regulators also warned the e-commerce company could face a business suspension, while police repeatedly searched company offices and examined whether the breach involved insider activity and possible overseas data leakage. One report said investigators identified a former Chinese employee as a suspect, while officials said no malware had been found and did not rule out a state-backed angle.
The fallout reached Coupang's top leadership as the company's CEO resigned over the incident and police considered an overseas travel ban on senior executives. Investigators later questioned Coupang's interim chief for 12 hours as part of the criminal probe, and South Korean police said they would continue examining management responsibility for the breach and the company's handling of user data. The case also drew political attention abroad after a U.S. lawmaker accused Korean regulators of taking "discriminatory" action against Coupang, underscoring how the breach has become both a major privacy enforcement case and a high-profile corporate governance crisis.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
6 events from the most recent confirmed update back to the earliest known activity.
Authorities said they would question Coupang's interim CEO in the continuing investigation into the company's data breach. The planned interview reflected sustained law-enforcement pressure on senior management.
Police questioned Coupang's interim chief for 12 hours as part of the data-breach probe. The interrogation marked a major investigative step focused on executive accountability.
South Korea's Personal Information Protection Commission said it was investigating a Coupang data breach that affected about 34 million individuals. The regulator also indicated it had not found malware and was examining the possibility of a state-backed attack.
A U.S. lawmaker accused South Korean regulators of discriminatory treatment toward Coupang in connection with the company's data-breach fallout. The criticism added a political dimension to the ongoing investigation and enforcement actions.
South Korean police weighed imposing an overseas travel ban on Coupang's chief as the criminal investigation into the data breach intensified. The move signaled escalating scrutiny of company leadership.
South Korean authorities were reported to be considering possible business suspension measures against Coupang following its massive data breach. This marked an early escalation in regulatory consequences before the later PIPC investigation and police actions.
10 references tracked. Mallory keeps watching after this page renders.
economictimes.indiatimes.com
Open sourceasia.nikkei.com
Open sourcekoreatimes.co.kr
Open sourcekoreatimes.co.kr
Open sourcekoreatimes.co.kr
Open sourcebiz.chosun.com
Open sourcekoreatimes.co.kr
Open sourcekoreatimes.co.kr
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Coupang, South Korea’s largest online retailer, suffered a massive data breach that compromised the personal information of nearly 34 million customers. The breach, which was revealed in mid-November, led to the resignation of CEO Park Dae-jun, who cited a deep sense of responsibility for the incident and its aftermath. Coupang’s parent company appointed Harold Rogers as interim CEO, with a stated focus on restoring customer trust and stabilizing the organization. The breach has intensified scrutiny of cybersecurity practices in South Korea, a country already noted for frequent data security incidents. In response to the breach, Seoul Metropolitan Police cyber investigators raided Coupang’s headquarters, seizing devices and data to determine the cause and scope of the incident. Authorities believe the perpetrator was a Chinese former employee with privileged access, who allegedly used a stolen private encryption key to forge authentication tokens and access customer data. The incident has sparked political debate over the adequacy of South Korea’s data protection laws and raised concerns among investors, especially after it was revealed that senior executives sold shares in a preplanned sale shortly before the breach was publicly disclosed.
Jun 29, 2026
South Korean authorities attributed Coupang’s large-scale customer data leak to **management and security control failures**, not a sophisticated external cyberattack. Investigators said a **former Coupang engineer** who knew about weaknesses in the company’s authentication process gained unauthorized access beginning in April (after an earlier attempt in January) and maintained access until November, exploiting authentication vulnerabilities to access user accounts without proper login. Officials urged Coupang to remediate security weaknesses and asked police to investigate allegations that Coupang deleted some data despite an order to preserve it; Coupang said it is strengthening safeguards and claimed there was no evidence other parties accessed or viewed the data, and that the exposed data did not include payment or login information. The incident affected roughly **33.7–34 million** customers, with exposed data reported to include **names, email addresses, phone numbers, shipping addresses, and some order history**. The breach has escalated into a cross-border legal and political dispute: multiple **U.S. investment firms** (including Greenoaks, Altimeter, Abrams Capital, Durable Capital Partners, and Foxhaven Asset Management) filed notices seeking **investor–state dispute settlement (ISDS)** arbitration under the **Korea–U.S. Free Trade Agreement**, alleging South Korea’s investigation and enforcement actions were discriminatory and unusually severe compared with other domestic breach cases; reported measures included threats of major fines, operational suspension, and executive travel bans.
Jun 29, 2026
South Korea’s Personal Information Protection Commission imposed a record **624.6 billion won** fine on Coupang, plus **248 million won** on subsidiary Coupang Fulfillment Service, after a breach exposed personal data tied to roughly **34 million to 37.55 million people**. Regulators said the incident stemmed from weak security controls, including poor authentication key management and inadequate access restrictions, and that exposed data included names, email addresses, shipping addresses, phone numbers, and order histories. Authorities said the breach began in 2025 and persisted for months before discovery, making it one of the country’s largest retail-sector privacy incidents. The commission also cited Coupang for failures involving data destruction, breach notification, interference with the independence of its data protection officer, and obstruction of the investigation. Investigators identified the main suspect as a former Coupang IT employee, described in one report as a **43-year-old Chinese national**, who allegedly retained sensitive data on multiple hard drives and tried to destroy evidence by discarding a laptop in a river. Coupang said it plans to challenge the penalty, disputed aspects of the exposure, and maintained the stolen data was limited, deleted from recovered devices, and not shared onward.
Jun 29, 2026