Coupang CEO Resigns Amid Major Data Breach Crisis

Park Dae-jun, the CEO of South Korea's largest online retailer, Coupang, has resigned following a significant data breach that compromised the personal information of nearly 34 million customers. The breach, which was discovered on November 18, 2025, is considered one of the largest in South Korean history, exposing sensitive data including names, email addresses, phone numbers, and shipping addresses, although payment details and login credentials remained secure. The breach reportedly began in June and continued undetected for several months.

Reuters

In the wake of Park's resignation, Coupang appointed Harold Rogers, the Chief Administrative Officer of its parent company, Coupang Inc., as interim CEO. Rogers is tasked with restoring customer trust and implementing enhanced security measures to prevent future incidents. Park expressed his regret, stating, "I feel a deep sense of responsibility for the outbreak and the subsequent recovery process, and I have decided to step down from all positions."

CNBC

The breach has triggered a strong governmental response, with South Korean Prime Minister Kim Min-seok announcing a thorough investigation into the incident. Police have conducted raids at Coupang's headquarters to gather evidence related to the breach, which is believed to involve a former employee who has since returned to China. The government is considering imposing severe penalties on Coupang, with potential fines reaching up to 1 trillion won (approximately $681 million). President Lee Jae Myung described the breach as a "wake-up call" for the industry, advocating for stricter penalties for data breaches.

Bloomberg

The incident has sparked widespread criticism from lawmakers and the public, with many questioning Coupang's cybersecurity measures and the company's ability to protect customer data. Park faced intense scrutiny during legislative hearings, where he acknowledged the involvement of a former employee in the breach. Lawmakers have warned of serious consequences if Coupang's founder, Bom Kim, fails to appear at an upcoming parliamentary hearing scheduled for December 17.

BloombergCNBCReuters

Coupang's leadership transition comes at a critical time as the company seeks to stabilize operations and address customer concerns. The ongoing investigation and potential legal ramifications could have lasting effects on Coupang's reputation and operational practices. As the company navigates this crisis, it faces the challenge of rebuilding trust with its customer base and ensuring robust cybersecurity measures are in place to prevent future breaches.

Bloomberg

• “I am deeply sorry for disappointing the public with the recent personal information incident,” — Park Dae-jun, Former CEO of Coupang

CNBC

• “deeply apologises for causing concerns to the public,” — Coupang Statement

Reuters

• “Last week President Lee Jae Myung said it was “truly astonishing” that Coupang had failed to detect unauthorized access of its systems for such a long time.” — President Lee Jae Myung

Bloomberg

While sources agree on the scale of the data breach and the resignation of Park Dae-jun, there are discrepancies regarding the specifics of the breach's timeline and the exact nature of the data compromised. Some reports indicate that the breach may have been ongoing for five months, while others focus on the immediate aftermath and responses from the government and law enforcement. Further details regarding the investigation's findings and the identity of the hacker remain unclear.

Bloomberg