South Korea hits e-commerce giant Coupang with record US$409 million fine for data breach
South Korea has fined e-commerce giant Coupang a record US$409 million for a data breach that exposed the personal information of over 30 million customers. The Personal Information Protection Commission announced the fine, totaling 624.68 billion won, for violating safety obligations and collecting personal data without legal grounds.

Briefing Summary
AI-generatedSouth Korea has fined e-commerce giant Coupang a record US$409 million for a data breach that exposed the personal information of over 30 million customers. The Personal Information Protection Commission announced the fine, totaling 624.68 billion won, for violating safety obligations and collecting personal data without legal grounds. The commission cited inadequate safeguards, including poor management of authentication keys and lax access controls, as the cause of the leak affecting approximately 37.5 million users. This decision concludes a months-long investigation into the US-incorporated online retail platform, which began after allegations of the data leak surfaced in November. The commission also stated that Coupang failed to notify affected individuals within the required 72-hour timeframe.
Article analysis
Model · rule-basedKey claims
5 extractedCoupang should have notified affected individuals within 72 hours.
Inadequate basic safeguards led to the exposure of personal data.
Coupang violated safety obligations and collected personal data without legal grounds.
The data leak exposed the personal data of more than 30 million customers.
South Korea imposed a record US$409 million fine on e-commerce giant Coupang for a data breach.