AI Governance
Data Centers
Drones
Climate
Privacy
2026 Maine Senate
Bob Dylan
Last Update: 10/27/2026 at 6:00 AM EST
Coupang Data Breach and South Korean Enforcement
Coverage from EpicKor, The Record, and others
South Korea’s Personal Information Protection Commission investigated a Coupang data breach that exposed personal information belonging to tens of millions of customers.
Regulators cited weaknesses in safeguards and authentication-key management, as well as failures involving breach notification, and separately found that Coupang collected some users’ online activity data without consent. The resulting enforcement included a major financial penalty; Coupang disputed aspects of the findings and announced plans to challenge the decision. Compensation measures and the company’s response to the case are also part of its broader business consequences.
Looking Back
225 Day Timeline
Feb 12
Mar 19
Apr 30
Jun 4
Jul 9
Aug 20
Sep 24
All Articles103 articles
Important
PIPC finalized a Coupang breach decision on June 11, 2026 while TVING's June 2026 investigation continued under South Korea's amended privacy law.
7/19/2026 • Data Breaches & Exposure Events • General
PIPC fined Coupang 624.7 billion won in South Korea on record breach findings covering exposed member accounts and non-member delivery recipients.
6/12/2026 • Regulation, Law & Enforcement • General
South Korea’s Personal Information Protection Commission fined Coupang in June 2025 after a breach exposed personal data of more than 33 million customers.
6/11/2026 • Regulation, Law & Enforcement • General
South Korea fined Coupang in 2025 over a customer data leak involving delayed detection beyond legal 72 hours and illegal online activity data collection.
6/11/2026 • Regulation, Law & Enforcement • General
South Korea's Personal Information Protection Commission began enforcing revised privacy rules on September 11, allowing fines of up to 10% of annual revenue for qualifying major data leaks.
9/24/2026 • Regulation, Law & Enforcement • General
South Korea's privacy regulator will enforce higher breach penalties and 72-hour potential-exposure notifications nationwide from September 11, 2026.
9/10/2026 • Regulation, Law & Enforcement • General
South Korea's PIPC fined KT Corp. 53.98 billion won on Thursday over a femtocell-linked breach that exposed 16,647 subscribers and enabled unauthorized mobile payments in South Korea.
7/30/2026 • Data Breaches & Exposure Events • General
South Korea's Foreign Ministry disclosed in 2026 that hackers accessed the Korea National Diplomatic Academy training platform for ten months, stealing credential data.
7/24/2026 • Data Breaches & Exposure Events • General
South Korea's National Intelligence Service discovered a 10-month breach of the National Diplomatic Academy system in February 2026, exposing personal data of Ministry of Foreign Affairs employees.
7/23/2026 • Data Breaches & Exposure Events • General
South Korea investigates a suspected data leak at a government-run diplomat training academy, with about 10,000 diplomat records potentially affected.
7/21/2026 • Data Breaches & Exposure Events • General
South Korea's Foreign Ministry announced a data breach at the Korea National Diplomatic Academy online system after suspicious access notifications in early February.
7/21/2026 • Data Breaches & Exposure Events • General
CK filed a class-action damages lawsuit at Seoul Central District Court over the November 2023 Golfzon ransomware data breach, seeking compensation for alleged safeguards and retention failures.
6/29/2026 • Data Breaches & Exposure Events • General
South Korea's PIPC fined Coupang a record 624.7 billion won in connection with a disclosed breach affecting 37.6 million people.
6/27/2026 • Regulation, Law & Enforcement • General
South Korea Personal Information Protection Commission fined Coupang 624.7 billion won on June 11, 2026 for a personal data leak tied to weak security controls and unauthorized online activity collection.
6/19/2026 • Regulation, Law & Enforcement • General
South Korean privacy regulator fined Coupang 624.7 billion won for a data breach exposing 33.7 million people, citing authentication failures, delayed reporting, and access log deletion.
6/16/2026 • Regulation, Law & Enforcement • General
South Korean regulators fined Coupang 624.7 billion won in 2025-2026 enforcement over a data breach exposing 33.7 million people.
6/16/2026 • Regulation, Law & Enforcement • General
South Korea's Personal Information Protection Commission fined Coupang in 2024 for unauthorized personal data leakage and consentless collection of third-party online activity records.
6/15/2026 • Regulation, Law & Enforcement • General
South Korea’s PIPC fined Coupang a record amount after a 2025 breach exposed customer account information, citing security safeguard failures and a delayed 72-hour report.
6/15/2026 • Data Breaches & Exposure Events • General
South Korea's Personal Information Protection Commission fined Coupang and Coupang Fulfillment Service in enforcement action over unauthorized personal data collection, third-party tracking records, and litigation-related misuse.
6/15/2026 • Regulation, Law & Enforcement • General
In South Korea, the Personal Information Protection Commission fined Coupang in 2024 for unauthorized personal data collection and misuse tied to advertising and industrial accident litigation.
6/15/2026 • Regulation, Law & Enforcement • General
South Korea's Personal Information Protection Commission fined Coupang in June 2026 for unauthorized personal data leakage and third-party online activity collection.
6/15/2026 • Regulation, Law & Enforcement • General
South Korea's Personal Information Protection Commission fined Coupang in 2024 for unauthorized personal data leakage and consent failures tied to third-party tracking and advertising partner practices.
6/15/2026 • Regulation, Law & Enforcement • General
PIPC fined Coupang KRW 624.68 billion in response to a June 2025 insider-led breach that exposed PII and missed South Korea's 72-hour notification rule.
6/14/2026 • Regulation, Law & Enforcement • General
South Korea's Personal Information Protection Commission fined Coupang 624.9 billion won on June 11, 2026 for a 2025 breach exposing about 33.7 million customer accounts.
6/13/2026 • Regulation, Law & Enforcement • General
South Korea's PIPC fined Coupang in 2025 for a breach exposed personal data for 37.5 million customers, linked to an unrevoked signing key.
6/13/2026 • Regulation, Law & Enforcement • General
Coupang received a record W624.7 billion (about US$409 million) data privacy fine in South Korea after a major breach, impacting near-term earnings.
6/13/2026 • Regulation, Law & Enforcement • General
South Korea's Personal Information Protection Commission fined Coupang in 624.6 billion won actions covering unauthorized personal data collection and leakage affecting about 37.55 million users.
6/12/2026 • Data Breaches & Exposure Events • General
South Korea’s Personal Information Protection Commission fined Coupang 408 million USD in 2025 after a breach exposed data for over 33 million customers and delayed 72-hour notification.
6/12/2026 • Data Breaches & Exposure Events • General
South Korea's PIPC imposed a record Won624.68bn surcharge on Coupang after a 2025 customer data breach affecting about 37.55 million users.
6/12/2026 • Regulation, Law & Enforcement • General
South Korea's Personal Information Protection Commission fined Coupang in 2024 for unauthorized personal data leakage and consentless online activity collection.
6/12/2026 • Regulation, Law & Enforcement • General
South Korea's PIPC fined Coupang a record 624.7 billion won in June 2026 for customer data exposure and unlawful online activity record collection.
6/12/2026 • Regulation, Law & Enforcement • General
South Korea's Personal Information Protection Commission fined Coupang in response to unauthorized third-party online tracking storage affecting roughly 37.55 million people and required partner oversight.
6/12/2026 • Regulation, Law & Enforcement • General
South Korea Personal Information Protection Commission fined Coupang in 2024 for unauthorized personal data collection and leakage affecting about 37.55 million people.
6/12/2026 • Regulation, Law & Enforcement • General
South Korea's Personal Information Protection Commission fined Coupang in 2024 after an alleged breach exposed personal data for more than 30 million users, citing delayed notification and weak access safeguards.
6/11/2026 • Regulation, Law & Enforcement • General
South Korea fined Coupang 625 billion won after a data breach exposed over 33 million customer records and the company missed the 72-hour detection requirement.
6/11/2026 • Data Breaches & Exposure Events • General
South Korea’s Personal Information Protection Commission fined Coupang on June 11 after a data breach exposed over 33 million customers and breached a 72-hour detection requirement.
6/11/2026 • Data Breaches & Exposure Events • General
South Korea's Personal Information Protection Commission fined Coupang 624.7 billion won in 2026 for a breach affecting 37 million users and unauthorized tracking of online activity.
6/11/2026 • Regulation, Law & Enforcement • General
South Korea fined Coupang on record terms in 2025 for leaking customer information of over 33 million people and unlawful online activity data collection.
6/11/2026 • Data Breaches & Exposure Events • General
South Korea fined Coupang in June 2026 after a customer data breach affecting over 33 million people was not detected within 72 hours and included unlawful online tracking.
6/11/2026 • Regulation, Law & Enforcement • General
South Korea's PIPC fined Coupang 624.68bn won in 2023 after a breach exposed personal data for more than 30 million customers.
6/11/2026 • Data Breaches & Exposure Events • General
South Korea's Personal Information Protection Commission fined Coupang in 2020s decisions 624.7 billion won for a data breach and unauthorized online activity collection.
6/11/2026 • Regulation, Law & Enforcement • General
South Korea's privacy regulator fined Coupang LLC in 2026 after a late-2025 data breach exposed personal information of more than 33 million users.
6/11/2026 • Data Breaches & Exposure Events • General
South Korea's privacy regulator fined Coupang in 2025/2026 after an alleged insider used a stolen cryptographic signing key to access overseas customer data and notify regulators late.
6/11/2026 • Data Breaches & Exposure Events • General
South Korea’s PIPC fined Coupang in 2026 for a 2025-era customer data breach and consent-free online activity data collection, citing retained cryptographic keys.
6/11/2026 • Regulation, Law & Enforcement • General
South Korea's Personal Information Protection Commission fined Coupang in 2025-2026 for a breach affecting 33 million customers and illegal marketing data collection.
6/11/2026 • Regulation, Law & Enforcement • General
South Korea police and the PIPC investigated a Duo Info breach after exposure of detailed matchmaking and personal data for 430,000 members, with notification delayed until the PIPC announcement.
4/26/2026 • Data Breaches & Exposure Events • General
Korean National Police Agency investigators are examining a Lee & Lee Country Club website hack after a breach exposed personal data of about 100,000 customers.
4/26/2026 • Data Breaches & Exposure Events • General
South Korea's Personal Information Protection Commission fined Duo in 2024 after a January hack exposed sensitive matchmaking members' personal data.
4/23/2026 • Data Breaches & Exposure Events • General
South Korea's Personal Information Protection Commission fined Duo in connection with a January hack exposing sensitive member data from the Duo matchmaking service.
4/23/2026 • Data Breaches & Exposure Events • General
South Korea's Personal Information Protection Commission fined Duo in 2024 after a January breach exposed sensitive personal data from over 420,000 matchmaking members.
4/23/2026 • Data Breaches & Exposure Events • General
South Korea's PIPC fined KT Corporation KRW 53.979 billion in 2026 over an 11-month network compromise affecting 16,647 subscribers and enabling fraudulent mobile payments.
7/30/2026 • Regulation, Law & Enforcement • General
South Korea disclosed in 2026 a ten-month breach of the National Diplomatic Academy online education system that exposed MFA employees data, including overseas diplomats.
7/22/2026 • Data Breaches & Exposure Events • General
Unidentified hackers compromised an online education system used by South Korea's Korea National Diplomatic Academy, potentially exposing ministry employees and trainees, after a zero-day vulnerability was exploited.
7/20/2026 • Data Breaches & Exposure Events • General
South Korea's Personal Information Protection Commission fined Coupang Corp. in 2024 for a personal data breach involving months of improper internal access to about 34 million accounts.
6/12/2026 • Data Breaches & Exposure Events • General
South Korea's Personal Information Protection Commission fined Coupang Corp. in 2024 after a cyber intrusion and months of insider access exposed about 34 million accounts.
6/11/2026 • Regulation, Law & Enforcement • General
PIPC fined Coupang in South Korea in 2025 after a late-June breach exposed data for over 37 million customers.
6/11/2026 • Data Breaches & Exposure Events • General
Seoul's Personal Information Protection Commission fined Coupang 624 billion won in 2026 after a December 2025 breach exposed personal data of more than 34 million customers.
6/11/2026 • Data Breaches & Exposure Events • General
Seoul's Personal Information Protection Commission fined Coupang in 423.6 billion won in 2024 or later after a breach exposed personal data of more than 30 million customers.
6/11/2026 • Data Breaches & Exposure Events • General
South Korea's Personal Information Protection Commission fined KT Corp 54 billion won in Seoul on Thursday after hackers exposed data from more than 16,600 mobile customers.
7/30/2026 • Data Breaches & Exposure Events • General
South Korea's privacy regulator began enforcing revised breach rules Friday, allowing fines of up to 10 percent of revenue for severe data violations in South Korea.
9/10/2026 • Regulation, Law & Enforcement • General
The Citizens’ Coalition for Economic Justice urged South Korea’s National Assembly to expand class actions after Tving proposed points and coupons for a breach affecting 39.54 million accounts.
9/4/2026 • Regulation, Law & Enforcement • General
Lawyers for a Democratic Society filed a damages suit Saturday in Seoul against Seoul Facilities Corporation over the Ttareungi personal-information breach.
8/24/2026 • Data Breaches & Exposure Events • General
South Korean public institutions recorded 164 personal information leaks during the first half of 2026, according to Personal Information Protection Commission data from South Korea.
8/16/2026 • Data Breaches & Exposure Events • General
Sogang University reported Saturday that an unidentified outside attacker exposed integrated login information belonging to approximately 180,000 students, alumni, and staff in Seoul.
8/15/2026 • Data Breaches & Exposure Events • General
Sogang University reported Saturday that an unidentified external attacker compromised information associated with about 180,000 students, alumni, and employees in Seoul, South Korea.
8/15/2026 • Data Breaches & Exposure Events • General
H&M disclosed that an attack believed to have occurred around August 5 exposed some South Korean customers' contact and order-reference information.
8/14/2026 • Data Breaches & Exposure Events • General
South Korea's Democratic Party disclosed a Blue Wave cyberattack affecting 17,088 members after an estimated September 2, 2025 intrusion, prompting criticism of delayed confirmation and notification.
8/9/2026 • Data Breaches & Exposure Events • General
South Korea's Democratic Party disclosed in Seoul that a cyberattack exposed 17,088 Blue Wave members' information and triggered police, regulatory, and security investigations.
8/7/2026 • Data Breaches & Exposure Events • General
South Korea's Consumer Dispute Settlement Commission recommended on July 22 that Coupang pay 50 customers 100,000 won each for damages from last year's personal data breach.
7/31/2026 • Data Breaches & Exposure Events • General
South Korea's Consumer Dispute Settlement Commission proposed Friday that Coupang compensate breach victims 100,000 won each for exposed personal information.
7/31/2026 • Data Breaches & Exposure Events • General
South Korea's Consumer Dispute Settlement Committee ordered Coupang to pay affected consumers 100,000 won each after a prolonged personal data breach exposed private information.
7/31/2026 • Data Breaches & Exposure Events • General
South Korea's Personal Information Protection Commission fined KT Corp 54 billion won on July 30 in Seoul after hackers stole data from more than 16,600 customers and enabled illegal payments.
7/30/2026 • Data Breaches & Exposure Events • General
South Korea's Personal Information Protection Commission fined KT Corp 54 billion won on July 30 in Seoul over a 2024-2025 breach affecting more than 16,600 mobile customers.
7/30/2026 • Data Breaches & Exposure Events • General
Coupang appealed a 410 million South Korea Personal Information Protection Commission penalty after a data breach discovered about five months after an alleged June start.
6/17/2026 • Data Breaches & Exposure Events • General
South Korea's Personal Information Protection Commission fined Coupang 409 million after a November 2025 customer data breach, citing inadequate customer-information security systems.
6/11/2026 • Regulation, Law & Enforcement • General
Boram Sangjo Development received an administrative fine in South Korea after a May 2024 hacking incident exposed 27,882 personal data items and triggered delayed breach notice.
5/18/2026 • Data Breaches & Exposure Events • General
Boram Sangjo was fined in South Korea after a May 2024 hacking incident exposed 27,882 personal information records, with late breach notification and improper retention.
5/14/2026 • Data Breaches & Exposure Events • General
South Korea's National Assembly passes PIPA amendments on February 12 2026 authorizing fines up to 10 percent of revenue for high severity data breaches.
2/12/2026 • Regulation, Law & Enforcement • General
South Korea's Personal Information Protection Commission fined KT Corp. 54 billion won on July 30 in South Korea after hackers stole customer personal and payment data during 2024 and 2025.
8/3/2026 • Data Breaches & Exposure Events • General
Interesting
South Korea's Democratic Party disclosed a Blue Wave personal data breach affecting approximately 17,000 members after an external hacking attack on September 2 last year.
8/9/2026 • Data Breaches & Exposure Events • General
South Korea's Personal Information Protection Commission fined Coupang 624.7 billion won on June 11, 2026, in Seoul for a major breach and unauthorized collection of online activity.
7/30/2026 • Regulation, Law & Enforcement • General
IGAWorks reported June 4.8337 trillion won in Coupang card payments and 35.09 million active users six months after a November personal data breach in South Korea.
7/5/2026 • Data Breaches & Exposure Events • General
Coupang said it will appeal a $410 million Personal Information Protection Commission penalty in South Korea tied to a data breach discovered about five months after suspected start.
6/17/2026 • Data Breaches & Exposure Events • General
Coupang shares rose after a Korean data regulator imposed a record 624.7 billion won data-breach fine, which appeared smaller than expected.
6/17/2026 • Regulation, Law & Enforcement • General
South Korean regulators fined Coupang about US$409 million in 2026 after a major data breach, affecting near-term earnings.
6/13/2026 • Regulation, Law & Enforcement • General
Coupang shares rose in South Korea after the Personal Information Protection Commission finalized a $409 million privacy fine for a November 2025 customer data breach.
6/11/2026 • Regulation, Law & Enforcement • General
Coupang shares rose on Thursday after South Korea's Personal Information Protection Commission finalized a roughly $409 million privacy fine for a November 2025 data breach.
6/11/2026 • Regulation, Law & Enforcement • General
Boram Sangjo in South Korea was fined in 2024 after a May 2024 hack exposed 27,882 personal records and breach notices were sent after the statutory deadline.
5/14/2026 • Regulation, Law & Enforcement • General
Coupang reported Q1 results after a prior data breach, citing continuing remediation costs through 2026 and reporting partial WOW membership recovery by April in South Korea.
5/6/2026 • Data Breaches & Exposure Events • General
Coupang reported a first-quarter net loss in 2026 after the company linked results to fallout from a November 2025 South Korea customer data breach.
5/6/2026 • Data Breaches & Exposure Events • General
Coupang reported Q1 net and operating losses in Seoul on May 6 after fallout from a November 2025 South Korea customer data breach involving about 33.6 million customers.
5/6/2026 • Data Breaches & Exposure Events • General
South Korea Financial Supervisory Service reportedly ordered a 4.5 month suspension of Lotte Card after a breach exposed nearly three million customers.
5/1/2026 • Data Breaches & Exposure Events • General
A South Korean House Judiciary Committee report says Coupang faced insider-driven data access and a $410 million privacy fine, with disputes involving alleged intelligence-service instructions.
7/6/2026 • Data Breaches & Exposure Events • General
South Korea’s privacy regulator and Korea Fair Trade Commission imposed record penalties on Coupang and sought controlling-entity jurisdiction over a U.S.-based founder after a breach.
6/16/2026 • Regulation, Law & Enforcement • General
South Korea fined Coupang US$409 million on Thursday after a Personal Information Protection Commission probe found safeguards failures exposed data for 30+ million customers.
6/11/2026 • Regulation, Law & Enforcement • General
Coupang reported a $556 million second-quarter operating loss in South Korea after a $410 million privacy fine followed a data breach and unauthorized data collection.
8/5/2026 • Regulation, Law & Enforcement • General
Coupang reported a second-quarter net loss in South Korea after a breach affecting more than 37 million customers led to a record privacy fine.
8/5/2026 • Data Breaches & Exposure Events • General
Coupang recorded a $556 million second-quarter operating loss in 2026 after South Korea's Personal Information Protection Commission fined Coupang 624.6 billion won over a November personal data breach.
8/5/2026 • Data Breaches & Exposure Events • General
Coupang reported in its second-quarter results that Korean regulators imposed approximately $410 million in fines after a breach exposed 33.7 million customer accounts.
8/5/2026 • Data Breaches & Exposure Events • General
Coupang reported an 865 billion won second-quarter loss in South Korea after regulators imposed a record fine linked to a breach affecting more than 37 million customers.
8/5/2026 • Regulation, Law & Enforcement • General
House Judiciary Committee reported allegations of discriminatory South Korean privacy enforcement against a U.S. company, citing a $410 million PIPC fine.
7/10/2026 • Regulation, Law & Enforcement • General
Seoul regulator fined Coupang in 2024 or 2025 for data-breach violations and unlawful third-party website online activity collection, totaling KRW 624.6 billion.
6/14/2026 • Regulation, Law & Enforcement • General
Additional
Coupang, Inc. reported Q4 2025 Q1 2026 recovery after a former-employee insider data breach affected membership and margins in South Korea.
7/3/2026 • Data Breaches & Exposure Events • General