South Korea’s biggest online retailer, Coupang, has confirmed a major data breach affecting 33.7 million customers — one of the largest privacy incidents in the country’s history.
🔍 What happened?
- The breach occurred on June 24, 2025, but Coupang only discovered it on November 18, 2025.
- Initial findings showed unauthorized access to around 4,500 accounts, but further investigation revealed that data from 33.7 million accounts was exposed.
📄 What information was leaked?
✔ Full names
✔ Phone numbers
✔ Email addresses
✔ Home addresses
✔ Order history
❗ What was not exposed:
❌ Payment card data
❌ Passwords
❌ Banking information
📡 Who is responsible?
Coupang has not confirmed the attacker, but local media report that a former employee abused unrevoked access tokens — an insider-driven breach.
⚠️ What should customers do?
Be cautious of:
- Fake SMS messages claiming to be from Coupang
- Phishing emails
- Calls asking for payment verification or account info
🇰🇷 Authorities, including the National Police Agency, KISA, and the Personal Information Protection Commission, have been notified.
This follows another massive breach earlier this year involving SK Telecom, highlighting an ongoing trend of large-scale incidents in South Korea’s tech sector.
🔒 Stay vigilant. Enable MFA, monitor your accounts, and verify all communication.
