Full Breakdown
South Korean Regulator Imposes Record Fine on Coupang Over Massive Data Breach
6/12/2026, 3:26:36 AM
Record-Breaking Penalty for Data Breach
South Korean authorities levied a record-breaking fine of 624 billion won (over US$400 million) on e-commerce platform Coupang after a data breach discovered in December 2025 compromised the personal data of more than 34 million customers. Coupang, a U.S.-headquartered retailer likened to the “Amazon of Asia,” faced the penalty after a former employee accessed names, email addresses, shipping addresses, phone numbers and order histories for two-thirds of the population. The Personal Information Protection Commission (PIPC) announced the penalty on Thursday, June 11 2026, citing the breach’s scale and consumer harm.
South Korea’s Data-Protection Framework
The Personal Information Protection Commission is South Korea’s data-privacy regulator and can impose maximum penalties for violations. The fine represents a rare case of a penalty against a U.S.-based firm. U.S. companies have rarely faced such financial sanctions for data breaches.
Timeline of the Breach and Enforcement
- December 2025 – A former employee accessed the personal data of roughly two-thirds of South Korea’s population over several months.
- June 11 2026 – The PIPC issued the 624 billion-won fine, described as a record-breaking penalty.
Scope of the Breach and Penalty
- Affected customers: More than 34 million individuals, roughly two-thirds of the South Korean population.
- Data exposed: Names, email addresses, shipping addresses, phone numbers and order histories.
- Financial penalty: 624 billion won (?US$400 million), the maximum penalty under the regulator’s authority.
Official Statements & Responses
The PIPC said the fine reflects the seriousness of the violation and extensive harm to consumers. Coupang told BBC News it plans to challenge the regulator’s decision. Korean lawmakers have accused U.S. representatives of linking the breach to broader U.S.–South Korea ties, suggesting political pressure on the investigation.
Verbatim Quotes
- “Coupang told BBC News that it plans to challenge the regulator’s decision.” — Coupang spokesperson
Criticism & Opposition
South Korean legislators have voiced concern that the case is politicized, alleging that some American counterparts are using the breach to exert pressure in response to the case against Coupang’s executives.
Why It Matters: International Implications
The fine is notable because U.S. companies rarely face financial sanctions for data breaches, illustrating the reach of South Korea’s privacy enforcement and the potential exposure of foreign firms to penalties under non-U.S. regimes.
Conflicting Reports & Gaps
The sources do not detail how the former employee obtained the data, nor do they provide a breakdown of the compromised records. No statements from U.S. officials are included, leaving the extent of any diplomatic response unclear.
What’s Next: Legal Challenge
Coupang has indicated it will challenge the regulator’s decision.
