The Circuitry
THE CIRCUITRYYour one-stop source for all tech news
HOMETODAYNEWSFEEDEVENTS
BOOKMARKS
RSS
© 2026 The Circuitry
About UsSourcesContactCorrectionsPrivacy
  • Today
  • Feed
  • Events
  • Saved
Scroll for more
Verification
VERIFIEDConfidence: HIGH
Source identified
Claims cross-referenced
No discrepancies found
Fact-check summary

Bloomberg, Reuters, NYT, Fortune and others corroborate South Korea's record 624.7B won ($409M) PIPC fine on Coupang for the 37M-customer data breach.

Sourcing
1source

via BleepingComputer

BleepingComputer · track record
66Stories
100%Verified
1930d
All sources →
Home/Tech/South Korea fines Coupang record $409M over data breach
VERIFIEDBy Xavier Rivera· ·2 min read

South Korea fines Coupang record $409M over data breach

South Korea's PIPC issued Coupang a record 624.6 billion won ($409 million) fine after a breach exposed personal data of over 37 million customers due to security failures and other violations. The penalty, paired with a company compensation plan exceeding $1.17 billion, highlights escalating regulatory pressure on major tech platforms handling consumer data.

Source:BleepingComputer
Post
South Korea fines Coupang record $409M over data breach
TL;DRAI · 60 sec read

South Korea fines Coupang a record $409 million after a breach exposed personal data of 37.55 million customers due to weak security controls. The Personal Information Protection Commission cites multiple violations in access management, data handling, and delayed reporting, marking the largest penalty of its kind in the country.

South Korea's Personal Information Protection Commission has levied its largest penalty to date against e-commerce leader Coupang, imposing 624.6 billion won, or roughly $409 million, after a breach compromised personal details of more than 37 million customers.

PIPC cites multiple violations in security practices. Investigators determined that the personal information of approximately 37.55 million individuals was exposed because of weak safeguards. These included lapses in authentication signature key oversight and access restrictions. The probe also uncovered failures to properly destroy records, delayed breach notifications, meddling with the data protection officer's autonomy, and efforts to hinder the official review.
The breach occurred in late June but was discovered only in mid-November, when Coupang warned that 33.7 million accounts had been compromised.
Coupang Fulfillment Service faces a separate 248 million won sanction for gathering, processing, and managing customer personal and sensitive information without proper authorization. According to the PIPC, the sanctions encompass "a fine of 624.681 billion won and a fine of 16.8 million won" plus corrective measures, public notices, and disclosure requirements.

Breach timeline and suspect identified. The incident took place in late June yet went undetected until mid-November, at which point the retailer notified users that 33.7 million accounts had been affected. Officials named a 43-year-old Chinese national formerly employed in Coupang's IT unit from 2022 through 2024 as the main suspect.
From The CircuitryThe Feed — live briefs across tech, all day.See what’s happening →
The company reported that the ex-worker surrendered several hard drives holding sensitive material. He had thrown a MacBook Air into a river to eliminate proof, though authorities retrieved the machine. Coupang further stated the individual kept information tied to roughly 3,000 accounts despite viewing millions, but later erased it from every device without sharing it externally.
The suspect also disposed of a MacBook Air laptop in a river in an attempt to destroy evidence, but the device was recovered.
Company response includes compensation plan. In late December the firm disclosed intentions to disburse 1.685 trillion won, or about $1.17 billion, while issuing single-use purchase vouchers worth 50,000 won, or roughly $34, to each customer beginning in January 2026. The move aims to address harm to more than 33 million people. Coupang, an American online retailer active in South Korea, maintains a workforce of 95,000 and generates annual revenue above $30 billion.

Context of similar large-scale incidents in Korea. SK Telecom, the nation's biggest mobile carrier, alerted subscribers in April that USIM information had been compromised after malware infiltrated its infrastructure. The operator subsequently disclosed that the malicious code first appeared in June 2022 and ultimately touched 27 million users, nearly its full subscriber list.
Coupang's former employee worked in its IT department until 2024.
Why this mattersAI · ~100 words

Tap a lens to see what this story means for you.

Reader-supported
DonateBuy me a coffee →Follow@thecircuitry_ →Follow@thecircuitry.to →

Reader-supported · The Brief

Liked this? The Brief brings you the whole day in tech, verified, every morning. Two minutes, free forever.

HELP US IMPROVE
From The Circuitry

See what’s happening right now

The Feed runs all day — short, verified briefs the moment they break.

Open the Feed →
From The Circuitry

Follow @thecircuitry_

Every story we publish, as it happens. No noise between.

Follow on X ↗On Bluesky ↗

Reader-supported

The Circuitry is a passion project I've always wanted to build, and I love the work behind it.

Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.

Any contribution is appreciated. If not, no pressure. Thanks for reading.

Buy me a coffee
data-breachCoupangSouth-Koreaprivacy
More fromBleepingComputer
  • OpenAI confirms ChatGPT is down worldwide

    Tech · 16h
  • CISA warns of actively exploited RCE flaws in Joomla extensions

    Tech · 12d
  • OpenAI Temporarily Drops 5-Hour Cap on GPT-5.6 Sol

    Tech · 13d
More inTech
  • SpaceX Targets Tower Catch for Starship on Next Flight

    Tech · 3h
  • Apple Sets 'Upgrade' Leasing Launch and Subscription Price Increases

    Tech · 12h
  • OpenAI confirms ChatGPT is down worldwide

    Tech · 16h
SupportThe Work

The Circuitry is reader-supported. If you find the daily brief useful, you can buy me a coffee to keep it going.

Buy a coffee →
SubscribeCircuitry Brief

Liked this? The Brief brings you the whole day in tech, verified, every morning. Free forever.

MORE IN TECH

SpaceX Targets Tower Catch for Starship on Next Flight

SpaceX plans to attempt catching its Starship spacecraft with mechanical tower arms on the next test flight following a successful ocean landing on Flight 13. The milestone would advance the vehicle's reusability after demonstrating satellite deployment and an in-flight engine restart.

Apple Sets 'Upgrade' Leasing Launch and Subscription Price Increases

Apple is preparing an "Apple Upgrade" leasing program with Klarna for a July 28 debut in the U.S. while lifting Apple Music and related subscription costs. The period also delivered iOS 27 beta 4, plans for roughly a dozen new Macs according to Bloomberg's Mark Gurman, and hands-on impressions of Samsung's Galaxy Z Fold8.

OpenAI confirms ChatGPT is down worldwide

OpenAI confirms ChatGPT is down worldwide. The outage began at approximately 5 AM ET on July 25, 2026, preventing users from loading chats or accessing previous conversations.