What: A major data breach at Coupang resulted in executive resignations, stock sales, and increased focus on cybersecurity and transparency in retail.

Why it is important: These events illustrate that data protection is now a core business risk, shaping executive accountability and industry standards.
Coupang’s recent data breach has sent shockwaves through the retail industry, exposing significant vulnerabilities in data protection and crisis management. The breach, which compromised the personal information of 33.7 million customers, led to a series of executive resignations and raised questions about insider trading as senior leaders sold company shares before the incident was publicly disclosed. This episode has intensified regulatory scrutiny and highlighted the critical importance of transparency and robust cybersecurity protocols in retail operations. The fallout from the breach has not only damaged Coupang’s reputation but also underscored the direct link between data security, consumer trust, and business continuity. As cyber threats become increasingly sophisticated and regulatory expectations rise, retailers are being compelled to prioritise data protection and crisis response at the highest levels of leadership. The incident serves as a stark reminder that cybersecurity is no longer just an IT concern but a fundamental business risk with far-reaching implications for governance and market value.

IADS Notes: The Coupang breach aligns with several 2025 industry developments. In December 2025, Inside Retail reported on Coupang executives’ stock sales and the CEO’s resignation following the breach. Earlier in May and August 2025, The Retail Bulletin and Retail Insight Network highlighted the growing operational and reputational risks of cyberattacks in retail, while Inside Retail emphasised that cybersecurity failures now directly affect leadership accountability and consumer trust.

Inside Coupang’s data breach: Disclosure gaps, leadership changes and scrutiny