Coupang Hit by Massive Data Breach: 34M at Risk

Hustler Words – South Korean e-commerce giant Coupang is grappling with a significant data breach, revealing that the personal information of approximately 34 million customers in Korea has been compromised. The breach, which the company believes began on June 24, 2025, exposed sensitive customer data over a period of more than five months.

Coupang detected the initial unauthorized access to around 4,500 user accounts on November 18. A subsequent, in-depth investigation uncovered the true scale of the incident, revealing that roughly 33.7 million customer accounts in South Korea were affected.

The compromised data includes customers’ names, email addresses, phone numbers, shipping addresses, and some order histories. Coupang assured users that more sensitive information, such as payment details, credit card numbers, and login credentials, remained secure and was not affected by the breach.

The company has reported the incident to key South Korean authorities, including the Korea Internet Security Agency (KISA), the Personal Information Protection Commission (PIPC), and the National Police Agency.

A Coupang spokesperson confirmed that the investigation has not found any evidence to suggest that consumer data from Coupang Taiwan or its "Rocket Now" quick-commerce service was affected.

Coupang believes the unauthorized access originated from overseas servers. "According to the investigation so far, it is believed that unauthorized access to personal information began on June 24, 2025, via overseas servers," the company stated. Coupang has taken steps to mitigate the damage, including blocking the unauthorized access route, enhancing internal monitoring systems, and engaging with a leading independent security firm for expert assistance.

Law enforcement agencies have identified a suspect, a former Chinese Coupang employee currently residing abroad. This individual is being investigated following a complaint filed on November 18.

This incident adds to a growing list of cybersecurity concerns in South Korea this year. Coupang has faced similar challenges in the past, including data breaches in 2020-2021 and in December 2023, when its seller management system exposed the personal information of over 22,000 customers.