South Korea’s dominant e-commerce platform Coupang has issued a formal apology following the discovery of a significant cybersecurity incident that potentially compromised the personal information of approximately 33.7 million domestic customer accounts. The breach, which represents more than half of South Korea’s 52 million population, marks the latest in a series of data security failures affecting major corporations in the technologically advanced nation.
According to company statements to the BBC, Coupang initially detected unauthorized access to approximately 4,500 customer accounts on November 18th, promptly reporting the incident to relevant authorities. Subsequent forensic investigation revealed the breach’s true magnitude, with evidence suggesting the security compromise may have originated as early as June through an overseas-based server.
The exposed data includes fundamental personal identifiers: customer names, email addresses, telephone numbers, physical shipping addresses, and selected order histories. Crucially, Coupang confirmed that financial information including credit card details and login credentials remained secure and uncompromised throughout the incident.
Often characterized as South Korea’s answer to Amazon, Coupang maintains dual headquarters in Seoul and the United States, recently reporting nearly 25 million active users. The company has advised customers to remain vigilant against potential phishing attempts and scams impersonating the brand while emphasizing that no immediate user action is required.
South Korea’s Ministry of Science and ICT has launched a comprehensive investigation into the breach, evaluating both its full scope and whether Coupang violated data protection regulations. The Personal Information Protection Commission announced plans for expedited assessment, noting that confirmed violations of safety measure obligations could result in significant sanctions.
This incident continues a troubling pattern of cybersecurity failures among South Korea’s corporate leaders despite the nation’s reputation for robust data privacy frameworks. Earlier this year, telecommunications behemoth SK Telecom faced penalties approaching $100 million following a breach affecting 20 million subscribers, while Lotte Cards acknowledged a separate cyberattack compromising data of nearly 3 million customers in September.









