Feb 27 β€’ 02:45 UTC πŸ‡°πŸ‡· Korea Hankyoreh (KR)

Taiwan government "Coupang has flaws in personal information management"... legal action warning

The Taiwan government confirmed flaws in Coupang's handling of personal data and announced imminent legal action.

The Taiwan government has stated that it will take legal action against Coupang, following the revelation that their management of personal data was inadequate. The Ministry of Digital Development's Digital Industry Department conducted an administrative inspection and found that the personal data of over 200,000 Coupang users in Taiwan had been accessed illegally. This issue has raised serious concerns given that it mirrors a major personal data breach involving 33.7 million individuals in South Korea last November, which was attributed to a former employee of the company.

Investigations by Taiwanese authorities revealed that attackers accessed user information through more than 2,000 different IP addresses, compromising sensitive data including names, email addresses, phone numbers, and shipping addresses. Although Coupang's Taiwan branch had previously claimed that user databases in Taiwan and Korea were kept separate, the inspection indicated that they were actually using the same backup keys, allowing unauthorized access. Additionally, the failure to revoke access for former employees and to regularly change backup keys exacerbated the situation.

Prior to this announcement, the Taiwan government had already sought explanations from Coupang following the massive leak incident in South Korea last year. Despite initial reports that Taiwanese user data was not affected, further findings indicated potential threats to all users, including those from Taiwan and Japan. This miscommunication and delay in reporting have prompted the Taiwanese government to emphasize enforcement measures under the Personal Information Protection Act, as they further investigate Coupang's compliance and user data safety protocols.

πŸ“‘ Similar Coverage