A massive data leak at Coupang, affecting 33.7 million customer accounts, was found to have been perpetrated by a former employee who accessed customer information over 150 million times.
A significant breach of personal information has been uncovered at Coupang, one of Korea's major e-commerce platforms. An investigation into the incident revealed that a former employee stole data from approximately 33.7 million accounts and accessed delivery location information around 150 million times. This extensive leak starkly contrasts Coupang's previous assertion that only 3,000 accounts had been affected, indicating the company's underestimation of the damage done.
The investigation, conducted jointly by public and private entities, detailed the specifics of the data compromised, which included names, email addresses, phone numbers, and lobby codes. The breach occurred via the 'Edit My Information' page on Coupang's site and persisted over a seven-month period from April 14 to November 8, 2025. The probe's findings were presented in a briefing at the government complex in Seoul, where officials expressed deep concern over the implications of such widespread data exposure in an era where digital privacy is paramount.
The ramifications of this data leak are profound, not only for Coupang and its millions of users but for the broader e-commerce and cybersecurity landscape in Korea. As customers face potential identity theft and fraud risks, the fallout may lead to a loss of trust in online platforms and heightened scrutiny from regulators. This incident serves as a critical reminder of the vulnerabilities inherent in the digital economy and the need for robust security measures to protect sensitive customer information.
