How Did Coupang's Data Breach Go Undetected for 5 Months?
Synopsis
Key Takeaways
- Data breach at Coupang affects 33.7 million customers.
- Compromised data includes names and contact details.
- Payment information remains secure.
- Investigation links breach to a former employee.
- Customers are urged to stay vigilant.
Seoul, Nov 30 (NationPress) Rising anxiety and frustration are becoming evident following a significant data breach at Coupang, the e-commerce powerhouse, which experts noted on Sunday could have persisted for several months. The company, listed in the U.S., has confirmed that personal data of 33.7 million customers—essentially its entire user base—has been compromised, as reported by Yonhap news agency.
The exposed data encompasses names, phone numbers, email addresses, and delivery locations. Fortunately, the firm reassured that payment details, credit card numbers, and login credentials remain secure.
According to Coupang, unauthorized access to delivery-related personal information appears to have originated from overseas servers since June 24.
Law enforcement agencies have reportedly identified a suspect, who is believed to be a former employee of Coupang from China. This individual is no longer part of the company and has since left the country, according to sources.
The investigation began after authorities received a complaint on Tuesday. Coupang first detected the breach on November 18 and informed relevant authorities within two days, originally estimating the incident to involve about 4,500 customers.
As the breach's scope emerged as much wider than initially reported, customers are increasingly worried about the potential misuse of their compromised data.
This incident far exceeds the data leak at SK Telecom in April, which impacted 23.2 million users and resulted in a record fine of 134.8 billion won.
Moreover, the full ramifications of this breach could escalate as the investigation unfolds. In a recent case, Lotte Card initially denied any financial data breach on September 4, but later acknowledged that sensitive information, including credit card numbers, had indeed been compromised.