Back Freepressjournal.In

Coupang Fined Record $410 Million In South Korea Over Data Breach & Privacy Violations ...

Freepressjournal.In • June 11, 2026

Seoul: South Korea's data protection regulator on Thursday fined e-commerce company Coupang a record 624.7 billion won ($410 million) over privacy violations, including a massive data breach that affected more than 37 million users.

Let us know! 👂 What type of content would you like to see from us this year?

Record fine for data breach and violations The Personal Information Protection Commission has decided to impose a record fine of 423.6 billion won for the data breach and levy an additional 201.1 billion won in fine for the unauthorised collection of records of online user activities and other violations.

It marked the regulator's highest fine ever against a company for a single data breach and multiple violations, reports Yonhap news agency.

Watchdog cites lack of protection systems "Coupang is a company that grew dramatically by offering an innovative e-commerce service based on large-scale customer information," Song Kyung-hee, the watchdog's chief, said in a briefing. "But our investigation confirmed that it did not have a system to protect and manage personal information commensurate to that."

Scope of the breach revealed The punitive measures came more than six months after Coupang reported a large-scale data breach last November of personal information of users in South Korea, including their names, phone numbers and delivery details.

The regulator concluded that 37.5 million users had been affected in the breach -- 33.2 million members and 4.3 million users who were not members.

The penalty for the breach more than tripled the regulator's record fine of 134.8 billion won against wireless carrier SK Telecom Co. last August over a major data leak.

Unauthorised data collection and ad issues The regulator also found that Coupang collected records of online activities of 11.17 million users, who accessed other services, without their permission. The records included websites and applications visited by the users.

Logistics arm also fined Separately, the watchdog also fined the company's logistics arm, Coupang Fulfillment Services, 248 million won for various privacy violations, such as collecting a list of journalists and keeping them on an employment restriction list.

(Except for the headline, this article has not been edited by FPJ's editorial team and is auto-generated from an agency feed.)

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Coupang Fined Record $400 Million for Major Data Breach Affecting Millions South Korea's Personal Information Protection Commission (PIPC) has fined Coupang, the country's largest e-commerce platform, a record 624.7 billion won (approximately $400 million) due to a significant data breach that compromised the personal information of around 37.5 million users. The breach, initially detected in late 2025, involved unauthorized access to sensitive data, including names, addresses, and order histories, primarily due to inadequate cybersecurity measures. Coupang's internal security protocols were found lacking, particularly in managing authentication keys and access controls. The company has expressed its intention to challenge the ruling in court, claiming that its efforts to mitigate the breach were overlooked. This incident has raised concerns about cybersecurity practices in South Korea and has led to diplomatic tensions with the US, as Coupang is a US-based company. The breach has also resulted in significant financial losses for Coupang, with its stock price plummeting by 35% since the beginning of the year. 27 sources 72

Extracted Entities

Coupang Fined Record $410 Million In South Korea Over Data Breach & Privacy Violations ...

The full story

Extracted Entities

Attack Types (1)

Companies (2)

Countries (1)

CWE Weaknesses (1)