Data leak
Coupang Insider Data Breach - 33.7M South Korean Customer Accounts
Primary Source βIncident Details
A former Coupang employee maintained unauthorized access to the company’s systems and exfiltrated customer data, with the breach continuing until November 8, 2025. Coupang (South Korea’s largest e-commerce platform, often called ‘South Korea’s Amazon’) reported the breach to Korean authorities on November 30, 2025 β more than 53 hours after internal identification, exceeding South Korea’s 24-hour reporting requirement under information network law. The breach exposed 33.7 million user accounts including names, phone numbers, delivery addresses, email addresses, and a subset of order histories. No banking, payment card, or login credentials were compromised. The South Korean government’s February 2026 investigation found the breach broader than Coupang initially claimed. Coupang CEO Park Dae-jun resigned in mid-December 2025. Coupang announced a 1.69 trillion won ($1.17 billion USD) compensation plan in platform-only vouchers. Major US investors β including Greenoaks, Altimeter, Abrams Capital, Durable Capital, and Foxhaven β filed ISDS arbitration claims against the South Korean government under the US-Korea Free Trade Agreement over the breach response.
Technical Details
- Initial Attack Vector
- Insider threat: a former Coupang employee retained unauthorized access to internal systems and exfiltrated customer data; breach persisted until November 8, 2025, per South Korean government investigation
Timeline
- 2025-11-08 Breach occurred
- 2025-11-30 Publicly disclosed
- 2025-11-30 Customers notified