What: Coupang faces a US securities class action after a data breach exposed the personal information of over 33 million customers, raising questions about its cybersecurity and disclosure practices.

Why it is important: The breach highlights the sector’s vulnerability to insider threats and the critical importance of executive accountability and timely disclosure in maintaining investor and consumer confidence.

Coupang, South Korea’s largest e-commerce company, is under intense scrutiny following a massive data breach that compromised the personal information of more than 33 million customers. The breach, which went undetected for five months, has led to a US securities class action alleging that Coupang and its leadership misled investors about the company’s data security and failed to disclose the incident promptly. The fallout has been significant, with executive resignations, regulatory investigations, and widespread concern about the adequacy of Coupang’s cybersecurity measures. The incident has also raised questions about insider threats, as a former employee retained unauthorised access to internal systems, and about executive accountability, with reports of stock sales by senior leaders before the breach was made public. This crisis underscores the growing risks facing digital-first retailers, where robust data protection, transparent crisis management, and timely disclosure are essential to maintaining trust and safeguarding both consumer and investor interests.

IADS Notes: Inside Retail in December 2025 reported on Coupang’s data breach, executive resignations, and stock sales, highlighting the operational and reputational fallout. The Retail Bulletin and Retail Week in May and August 2025 emphasised the escalating risks of cyberattacks and the need for executive accountability. These incidents, alongside similar breaches at major retailers, have made cybersecurity and transparent crisis response core priorities for the industry.

Coupang faces US securities class action over massive data breach