Did Coupang's Former Employee Only Save Data from 3,000 Customers?
Synopsis
Key Takeaways
- Coupang reported recovery of all leaked data.
- Only data from 3,000 accounts was saved and deleted.
- No evidence of external data sharing has been found.
- Government investigation into the breach is ongoing.
- Customer sensitive information remains secure.
Seoul, Dec 25 (NationPress) The renowned e-commerce platform Coupang announced on Thursday that it has successfully retrieved all leaked personal details concerning roughly 3,000 customers, emphasizing that no information has been disseminated externally.
In an official statement, Coupang revealed that a former employee was identified as the source of the data breach through forensic investigation, and this individual admitted their actions, providing a thorough explanation of how customer data was accessed, according to reports from Yonhap news agency.
The perpetrator utilized compromised security keys to gain access to basic customer data from around 33 million accounts, as stated by the company.
However, only data from approximately 3,000 accounts was actually saved and subsequently erased by the individual.
An internal audit revealed no signs that any customer information was shared with or sent to outside parties; the company further confirmed that all devices used to access and store this information, including a hard drive, have been secured.
The compromised information comprised customers' names, email addresses, phone numbers, home addresses, and additional details, according to the company.
Coupang emphasized that there was no exposure of sensitive data, such as payment details, login credentials, or customs clearance numbers.
This announcement from Coupang came on the heels of reports indicating that the presidential office was convening an emergency meeting with pertinent government officials regarding the incident.
However, the government disputed Coupang's announcement as a “unilateral assertion,” stating that results from a joint investigation team into the data leak have yet to be released.
The Ministry of Science and ICT expressed strong objections to Coupang's unilateral statement about an ongoing investigation conducted by the joint team.
Last month, a private-public team was established by the government to examine the data breach affecting 33.7 million users at Coupang.
The science ministry noted, “The private-public joint team is meticulously investigating the nature and extent of the data breach, as well as how the information was leaked,” adding that Coupang’s claims have not been verified by the team.