[Editorial] Coupang must stop 'distortion and lobbying' regarding the 150 million personal data inquiries
Coupang faces allegations of significant personal data leakage and improper handling, with calls to cease lobbying efforts to mitigate the situation.
Recent findings reveal that a former Coupang employee leaked approximately 33.67 million personal data records and queried delivery address lists nearly 150 million times. While secondary damage from the incident has not yet been confirmed, the potential misuse of this personal data remains a significant concern. Coupang's prior claims that only around 3,000 customer accounts were affected have been undermined, showcasing a substantial discrepancy in their reported data mishandling. The Coupang Incident Investigation Task Force stated that between April 2025 and several months thereafter, extensive personal data was accessed, including names, email addresses, phone numbers, and even shared access codes for delivery porters, raising fears of secondary crimes. Potentially sensitive information was accessed over 1.48 million times, creating a dire risk for the affected individuals.
Furthermore, the intruder allegedly manipulated user authentication systems while employed, highlighting gross negligence in Coupang's data security measures. Despite recognizing the breach's severity, Coupang has previously downplayed the incident, asserting only a minor number of accounts were impacted. In accordance with standard data protection guidelines, a data breach is classified when personal information escapes the control of the organization responsible, yet Coupang appears to be applying their own definitions rather than adhering to governmental standards. As a business operating primarily in Korea, it is crucial for Coupang to comply with local laws, safeguarding customer data and respecting the regulatory framework.
The editorial calls for Coupang to discontinue its lobbying activities, particularly in the United States, aiming to suppress this damaging information. The implications of upholding high standards of data protection and ethical business practices cannot be understated as public trust in the company is at stake. As more facts unfold, the necessity for reinstating accountability and transparency in Coupang's operations becomes increasingly crucial to safeguarding customer information and preventing future breaches.