Major Security Breach at Coupang Exposes Data of 34 Million Users

Coupang, a leading e-commerce platform in South Korea, has acknowledged a significant security incident that compromised sensitive data from close to 34 million users.

 

Coupang is a South Korean e-commerce platform that offers a broad selection of products—from groceries to electronics—while emphasising fast, reliable delivery.

 

In a statement shared with the media, a Coupang spokesperson said that on November 18 it identified unauthorised access access to its internal network. The e-commerce giant immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

Initial findings indicate that the incident, which began on June 24, affected the sensitive personal data of approximately 4,500 customers. However, a more comprehensive investigation later revealed that personal information belonging to 33.7 million users—nearly the company’s entire customer base—was compromised in the incident.

 

The affected data included names, email addresses, phone numbers, shipping addresses and some order histories. Coupang stated that no credit card information or login credentials were accessed by the threat actors. The company emphasised that these details remain securely protected, and no action is required from users at this time.

 

CEO Park Dae-jun issued a public apology a day after the company formally disclosed the breach.

 

“I express deep regret over the recent incident at Coupang that began on June 24. We sincerely apologise for causing significant inconvenience and concern to the public,” Park said.

 

While the company did not disclose who may be responsible for the breach, South Korean media outlets reported on Sunday that a former Coupang employee in China is suspected, according to their accounts, of involvement.

 

The Korea Internet & Security Agency, a government-operated body, released an advisory for affected individuals, warning them of possible phishing attempts.