How Did Coupang's Data Breach Go Undetected for 5 Months?

Click to start listening
How Did Coupang's Data Breach Go Undetected for 5 Months?

Synopsis

A recent data breach at Coupang has put the personal information of 33.7 million customers at risk, with concerns about potential misuse of data growing. The breach's duration and implications are alarming, urging customers to remain vigilant.

Key Takeaways

  • Data breach at Coupang affects 33.7 million customers.
  • Compromised data includes names and contact details.
  • Payment information remains secure.
  • Investigation links breach to a former employee.
  • Customers are urged to stay vigilant.

Seoul, Nov 30 (NationPress) Rising anxiety and frustration are becoming evident following a significant data breach at Coupang, the e-commerce powerhouse, which experts noted on Sunday could have persisted for several months. The company, listed in the U.S., has confirmed that personal data of 33.7 million customers—essentially its entire user base—has been compromised, as reported by Yonhap news agency.

The exposed data encompasses names, phone numbers, email addresses, and delivery locations. Fortunately, the firm reassured that payment details, credit card numbers, and login credentials remain secure.

According to Coupang, unauthorized access to delivery-related personal information appears to have originated from overseas servers since June 24.

Law enforcement agencies have reportedly identified a suspect, who is believed to be a former employee of Coupang from China. This individual is no longer part of the company and has since left the country, according to sources.

The investigation began after authorities received a complaint on Tuesday. Coupang first detected the breach on November 18 and informed relevant authorities within two days, originally estimating the incident to involve about 4,500 customers.

As the breach's scope emerged as much wider than initially reported, customers are increasingly worried about the potential misuse of their compromised data.

This incident far exceeds the data leak at SK Telecom in April, which impacted 23.2 million users and resulted in a record fine of 134.8 billion won.

Moreover, the full ramifications of this breach could escalate as the investigation unfolds. In a recent case, Lotte Card initially denied any financial data breach on September 4, but later acknowledged that sensitive information, including credit card numbers, had indeed been compromised.

Point of View

The breach at Coupang highlights the critical need for robust data protection measures. The alarming scale of this incident stresses the importance of holding companies accountable for safeguarding customer information.
NationPress
30/11/2025

Frequently Asked Questions

What information was compromised in the Coupang data breach?
The breach involved personal information such as names, phone numbers, email addresses, and delivery addresses of approximately 33.7 million customers.
Was payment information affected by the breach?
No, Coupang has confirmed that payment information, credit card numbers, and login credentials were not exposed in the breach.
When was the breach discovered?
Coupang discovered the breach on November 18 and reported it to the authorities within two days.
How many customers were initially thought to be affected?
Initially, Coupang estimated that around 4,500 customers were affected before realizing the breach was much larger.
What are the implications of this breach?
The breach raises serious concerns about the potential misuse of personal information, prompting customers to take precautions.
Nation Press