What: Coupang suffered a massive data breach, exposing the personal information of nearly 34 million customers over a five-month period.

Why it is important: The scale and duration of the breach illustrate how operational lapses can erode consumer trust and trigger regulatory scrutiny, consistent with recent market analyses.

Coupang, one of South Korea’s largest e-commerce retailers, experienced a significant data breach that went undetected for five months, ultimately compromising the personal information of almost its entire customer base—33.7 million users. The exposed data included names, phone numbers, email addresses, and delivery details, though payment and login credentials were reportedly unaffected. The breach, which began in June and was only discovered in November, has sparked widespread concern among consumers about potential fraud and phishing risks. Authorities have identified a former Chinese employee as a suspect, and investigations are ongoing. The incident has drawn comparisons to previous large-scale breaches in South Korea, such as SK Telecom’s, and has highlighted the persistent challenges retailers face in safeguarding customer data. The evolving situation underscores the critical importance of robust cybersecurity measures, rapid detection, and transparent communication to maintain consumer trust and comply with regulatory expectations. As the investigation continues, the full impact on Coupang’s reputation and regulatory standing remains to be seen.

IADS Notes: The Coupang breach reflects a broader trend of escalating cyber threats in retail, as seen in incidents involving Marks & Spencer and Harrods that resulted in significant financial and operational impacts (The Retail Bulletin, August 2025). The need for resilience and rapid crisis response has become paramount, with industry-wide reassessment of cybersecurity strategies highlighted in Retail Week (August 2025) and Inside Retail (May 2025). The prevalence of insider threats and vulnerabilities in digital supply chains, discussed in the Financial Times (May 2025) and RH-ISAC (April 2025), has elevated cybersecurity to a core business priority, making consumer trust and brand reputation increasingly dependent on robust data protection and effective management of breaches.

Major Coupang data breach reveals 33 million customers’ contact details