What: Coupang is under regulatory scrutiny after a major data breach exposed millions of customers’ information, prompting calls for improved security and accountability.

Why it is important: This incident demonstrates the growing regulatory focus on data security in retail, echoing recent industry trends and enforcement actions.

Coupang, one of South Korea’s largest e-commerce platforms, is facing intense regulatory scrutiny after a significant data breach compromised the personal information of over 33 million customers. The breach, which went undetected for several months, has led to widespread concern about the company’s data protection measures and crisis management capabilities. In response, South Korean authorities have demanded that Coupang address critical security vulnerabilities and improve its protocols to prevent future incidents. The fallout from the breach has been severe, with executive resignations, legal actions, and a substantial compensation package for affected users. This event has not only damaged Coupang’s reputation but also raised broader questions about the adequacy of cybersecurity practices in the retail sector. The incident underscores the urgent need for retailers to prioritise data security, maintain transparent communication during crises, and adapt to evolving regulatory expectations. As digital threats become more sophisticated, the retail industry must strengthen its defenses to protect consumer trust and ensure long-term resilience.

IADS Notes: In December 2025, Inside Retail reported on Coupang’s major data breach, which exposed nearly 34 million customers’ information and led to executive resignations and heightened regulatory investigations. By January 2026, Inside Retail and Reuters detailed the resulting US securities class action, investor demands for a US probe, and the announcement of a $1.18 billion compensation package. The Diplomat, in February 2026, highlighted how the incident escalated into a diplomatic issue, underscoring the operational, financial, and reputational consequences for Coupang and the broader retail sector.

South Korea says Coupang must address security loopholes in probe of data breach