Coupang hit with record 624.68 billion won fine over 37.5 million data leak
CPNG•South Korea’s data protection commission slapped Coupang with a 624.68 billion won ($408 million) penalty for a breach that exposed about 37.5 million customer records and illegally stored 11.17 million users’ online activity logs. Coupang intends to contest the ruling in court, insisting only 3,000 records were compromised.
1. Record Fine and Breach Details
South Korea’s Personal Information Protection Commission imposed a 624.68 billion won fine on Coupang after finding that inadequate safeguards exposed roughly 37.5 million customer records and unlawfully collected 11.17 million users’ online activity logs. The ruling cited poor management of authentication keys, lax access controls and delayed breach notifications beyond the required 72 hours.
2. Legal Challenge and Company Response
Coupang stated it will challenge the decision in court, arguing that only 3,000 customer records were involved and that proactive measures were taken to prevent secondary harm. The company apologized for public concern, pledged to bolster its data protection framework and expects facts to be clarified through legal proceedings.
3. US-South Korea Dispute
The breach and subsequent fine have strained relations between Seoul and Washington after U.S. lawmakers voiced opposition to external pressure on the investigation. South Korean legislators also raised concerns over political interference, highlighting the international ramifications of the probe.
