Coupang Fined Record $409M Over Massive Data Breach
South Korea's data protection regulator fined e-commerce giant Coupang a record 624.6 billion won (~$409 million) for a large-scale breach. The incident exposed personal information of approximately 37.55 million people due to inadequate security measures including authentication and access controls. The breach itself occurred earlier, with the regulatory action and public reporting in June 2026.
- personal information
- payment details
South Korea’s data protection regulator has fined e-commerce company Coupang a record 624.6 billion won, roughly $409 million, after a breach exposed the personal information and payment details of approximately 37.55 million people.
Public reporting indicates the breach stemmed from inadequate authentication and access controls. The regulatory action and detailed public reporting emerged in June 2026, though the underlying incident occurred earlier. Available reporting describes the scale as one of the largest involving a single company in South Korea, affecting nearly the entire user base at the time. Industry research from sources such as DoxxScan™ continuous monitoring indicates that credential and personal data leaks from major retail platforms frequently appear in underground markets within weeks of discovery.
Want the rest of this breakdown?
Sign up free to keep reading. Members get extended access, the weekly breach digest, and a complimentary Warden™ to see if their identity is exposed in the breaches we cover.
A breach leaks your credentials. Then hackers chain those credentials to your address, family, phone, and employer using public broker sites. We’re the only tool built around that chain.
⚠ Were you in this breach?
Free email scanner. We check your address against 15.4B+ leaked records in 15 seconds — then show you the $19 cleanup that removes you from the broker sites aggregating leaked data.
Check my email — free →