Coupang Faces Legal and Regulatory Challenges Following Data Breach

Coupang, South Korea's largest online retailer, is embroiled in a significant data breach scandal that has exposed personal information of approximately 33 million customers. The breach, which was discovered on November 18, 2022, involved unauthorized access to customer data, including names, email addresses, phone numbers, and shipping addresses, but did not compromise payment details or login credentials. The company reported that a former employee had retained access to internal systems for several months, leading to the leak.

Coupang Faces Class Action Alleging Violations After Data Breach

In response to the breach, Coupang is facing a class action lawsuit in the United States, filed in federal court in California. The lawsuit alleges that Coupang, along with its CEO Bom Kim and CFO Gaurav Anand, misled investors regarding the company's data security practices and failed to disclose the breach in a timely manner. The plaintiffs claim that Coupang's regulatory filings understated its vulnerability to cyberattacks and overstated its security measures. The lawsuit seeks damages for investors who purchased Coupang securities between August 6 and December 16, 2022.

ReutersCoupang Faces Class Action Alleging Violations After Data BreachKey facts: Coupang sued for data breach affecting 33M customers; founder criticized for absenceThe Straits Times

The South Korean government has classified the data breach as a major issue undermining public trust and has established the Coupang Data Breach Inter-ministerial Task Force (TF) to investigate the incident. The task force includes representatives from various ministries, including the Ministry of Science and ICT, Ministry of Employment and Labor, and the National Police Agency. Ryu Jemyoung, Second Vice Minister of Science and ICT, emphasized the seriousness of the breach, stating that it is not merely a corporate data leak but a social crisis that requires accountability. The government has expressed concerns over Coupang's response, indicating that if any legal violations are uncovered, strict actions will be taken.

Inter-ministerial Task Force LaunchedThe Straits TimesCoupang Faces Class Action Alleging Violations After Data BreachReuters

Coupang's founder, Bom Kim, has faced criticism for his absence during a parliamentary hearing regarding the breach. Lawmakers have suggested that his failure to address the situation could lead to further legal consequences. The company's previous CEO of its Korean subsidiary, Coupang Corp., resigned shortly after the breach was disclosed, reflecting the internal turmoil following the incident.

Reuters

Coupang has publicly stated that it identified the former employee responsible for the leak, who has confessed to the incident. The company claims that all leaked customer information has been deleted and that it is cooperating with ongoing investigations. However, the South Korean Science Ministry has raised concerns about Coupang's "unilateral disclosure" of allegations while investigations are still underway.

The Straits TimesReutersCoupang Faces Class Action Alleging Violations After Data BreachInter-ministerial Task Force Launched

As Coupang navigates the fallout from this data breach, it faces mounting legal and regulatory pressures both in South Korea and the United States. The implications of this incident extend beyond immediate financial concerns, potentially affecting the company's reputation and operational integrity in a highly competitive e-commerce landscape. The ongoing investigations and legal actions will likely shape the future of Coupang and its commitment to data security and corporate responsibility.

Coupang faces US class action and possible Korea suspension after data breach affecting 33.7 million users