Did Coupang Just Confirm a Major Data Breach?
Click to start listening
Synopsis
Coupang, the leading e-commerce platform in South Korea, has officially classified a recent incident as a data breach. With 33.7 million customers affected, the company reassures the public that no secondary damage has been detected. Learn about the implications and what steps Coupang is taking to safeguard customer information.
Key Takeaways
- Coupang has confirmed a data breach affecting 33.7 million customers.
- The breach involves names, phone numbers, and email addresses.
- No secondary damage has been reported by authorities.
- Coupang is cooperating with government agencies for further investigation.
- Customers are urged to take precautions against phishing.
Seoul, Dec 7 (NationPress) The renowned e-commerce platform Coupang released an updated announcement on Sunday, explicitly categorizing a recent event as a data breach in accordance with a directive from the government, while emphasizing that authorities have found no indications of any secondary damage.
"A situation involving the violation of customers' personal information has transpired," Coupang stated in its revised notice.
"There has been no additional leakage, and this announcement is meant to offer guidance on precautions to avert further harm, such as impersonation or phishing attempts, stemming from the personal information leak that we first reported on Nov. 29."
On November 29, Coupang revealed that the personal data of 33.7 million customers—almost its entire user base—had been affected, which includes their names, phone numbers, email addresses, and delivery details.
The data breach seems to have originated from overseas servers as of June 24, as stated by the U.S.-listed company.
"We immediately notified the appropriate authorities upon learning of the breach and are currently collaborating with the Ministry of Science and ICT, the Korean National Police Agency, the Personal Information Protection Commission, the Korea Internet & Security Agency, and the Financial Supervisory Service to investigate this matter," the e-commerce giant affirmed.
Coupang reassured that no financial information, including credit card or bank account details; no login credentials, such as passwords; and no personal customs clearance codes were compromised.
Furthermore, Coupang indicated that law enforcement has not identified any instances of secondary damage resulting from the leaked information thus far.
This updated announcement followed a directive from the Personal Information Protection Commission, which mandated Coupang to amend its description of the incident from personal information "exposure" to "breach," and to accurately reflect the comprehensive scope of affected information in its notice amidst public scrutiny over the company's purported attempts to minimize the seriousness of the incident.
In the meantime, Coupang advised its customers to refrain from clicking on links from unfamiliar sources and to report any suspicious activities to the relevant authorities.
Point of View
It is crucial to approach the Coupang data breach incident with an unbiased lens. The company's swift response to the breach, including notifications to authorities and measures to prevent further damage, demonstrates a commitment to transparency. However, the handling of such sensitive information raises concerns about data protection standards in the e-commerce sector.
NationPress
07/12/2025
Frequently Asked Questions
What is the nature of the data breach at Coupang?
Coupang has acknowledged a data breach involving the personal information of 33.7 million customers, including names, phone numbers, and email addresses.
Has there been any secondary damage reported?
Authorities have confirmed that there is no evidence of secondary damage resulting from the leaked information at this time.
What measures is Coupang taking in response to the breach?
Coupang is cooperating with multiple government agencies to investigate the breach and has issued guidelines for customers to safeguard their information.
What information was compromised in the breach?
The breach affected personal information but did not compromise payment details, passwords, or customs clearance codes.
What should customers do to protect themselves?
Customers are advised not to click on links from unknown sources and to report any suspicious activity to the relevant authorities.
