Coupang: South Korea fines e-commerce giant $400m over massive data breach<br>Skip to content
Home<br>News<br>US & Canada<br>UK<br>UK Politics<br>England<br>N. Ireland<br>N. Ireland Politics<br>Scotland<br>Scotland Politics<br>Wales<br>Wales Politics<br>Africa<br>Asia<br>China<br>India<br>Australia<br>Europe<br>Latin America<br>Middle East<br>In Pictures<br>BBC InDepth<br>BBC Verify<br>Football 2026<br>Business<br>World of Business<br>Technology of Business<br>NYSE Opening Bell<br>Technology<br>Artificial Intelligence<br>Intelligence Revolution<br>AI v the Mind<br>Tech Now<br>Health<br>Culture<br>Film & TV<br>Music<br>Art & Design<br>Style<br>Books<br>Entertainment News<br>Arts<br>Arts in Motion<br>Travel<br>Destinations<br>Africa<br>Antarctica<br>Asia<br>Australia and Pacific<br>Caribbean & Bermuda<br>Central America<br>Europe<br>Middle East<br>North America<br>South America<br>World’s Table<br>Culture & Experiences<br>Adventures<br>The SpeciaList<br>Earth<br>Science<br>Natural Wonders<br>Climate Solutions<br>Sustainable Business<br>Green Living<br>Sport<br>Audio<br>Podcast Categories<br>Radio<br>Audio FAQs<br>Video<br>BBC Maestro<br>Discover the World<br>Live<br>Live News<br>Live Sport
Site search
Home
News
Sport
Football 2026
Business
Technology
Health
Culture
Arts
Travel
Earth
Audio
Video
Live
Weather<br>Newsletters
Korea fines e-commerce giant $400m over data breach affecting millions
7 hours agoShareSaveAdd as preferred on Google
Osmond ChiaBusiness reporter
Bloomberg via Getty Images
Coupang is the dominant e-commerce company in South Korea
South Korea has hit online retail giant Coupang with a record fine of more than $400m (£299m) over a massive data breach that exposed the data of more than 30 million customers last year.
The fine is the largest ever issued by Seoul's Personal Information Protection Commission (PIPC) for a data breach.
The leak exposed the names, contact and delivery details and order histories of some customers of Coupang, South Korea's largest e-commerce platform often described as its equivalent of Amazon.
Coupang told the BBC it "deeply regrets the concern caused" and that it will strengthen its security measures, but added that it planned to challenge the PIPC decision.
The number of accounts affected by the incident represents more than half of South Korea's population of around 50 million people.
The PIPC on Wednesday announced a 423.6bn won fine over the personal data breach, and an additional 201bn won for the non-consensual collection of information.
The commission found that a lack of safeguards, including poor management of authentication signing keys and access controls, had resulted in the personal data of around 37.5 million users being exposed.
Coupang said that its explanations and measures to prevent further harm from the data breach "were not sufficiently reflected" in the commission's decision.
"Upon receiving the official resolution from the PIPC, we expect that the facts will be clearly established through legal procedures," said Coupang.
The decision follows a months-long probe into Coupang after allegations of the data leak surfaced in November.
The company is based in the US, but the majority of its revenue comes from South Korea.
Coupang told the BBC at the time that it was alerted to a breach involving 4,500 customer accounts in November and immediately reported it to the authorities.
But the company said that later checks found that nearly 34 million customer accounts - all in South Korea - were likely exposed. It added that the breach is believed to have begun as early as June through a server based abroad.
Following the breach, Coupang's boss Park Dae-jun resigned from his role, apologising for the incident. The platform's chief administrative officer Harold Rogers was appointed interim CEO.
South Korean firms faced a series of high-profile cyber-security incidents last year despite the country's reputation for tight data privacy standards.
Its largest mobile operator SK Telecom was fined nearly $100m over a data breach involving more than 20 million subscribers.
International Business<br>South Korea<br>Cyber-security<br>Data breaches
Related
New candy stores are popping up across NYC. Why?
World's largest chipmaker does not rule out price rises as costs increase
US adds BYD to list of firms with alleged Chinese military ties
More from the BBC
9 hrs ago
Should patients be worried about their stolen data?
Two years on from the cyber attack, the extent of the breach is still to be revealed.<br>9 hrs ago
24 hrs ago
Cyber attack partially closes secondary school
The headteacher has blamed a malware incident for the disruption to IT systems and communications.<br>24 hrs ago
1 day ago
University to launch defence technology courses
Bournemouth University receives £2.8m from the Ministry of Defence to fund the courses.<br>1 day ago
2 days ago
Sacked for scoring a goal
South Korean forward Ahn Jung-hwan had just scored the biggest goal of his career in 2002 until he was informed he was being let go by his club in Italy.<br>2 days ago
3 days ago
School in data breach over new pupils' details
Horizon Academy Trust says an investigation is under way...