South Korea hits Coupang with $400M+ fine for data breach that affected millions

In a landmark decision, South Korean authorities have levied a staggering fine of 624 billion won, equivalent to over $400 million, against Coupang, a prominent retail company, following a significant data breach that affected more than 34 million customers. This unprecedented penalty was announced by Seoul's Personal Information Protection Commission on Thursday, stemming from a breach that came to light in December 2025. Coupang, often referred to as the 'Amazon of Asia' and headquartered in the U.S., has been under scrutiny after it was revealed that a former employee exploited vulnerabilities to access sensitive information, including names, email addresses, shipping details, phone numbers, and order histories of approximately two-thirds of South Korea's population. In response, Coupang has stated its intention to contest the ruling. This case marks a rare instance of a U.S.-based company facing severe financial repercussions in South Korea, raising eyebrows among lawmakers. Some have suggested that political pressures from U.S. representatives are influencing the situation, especially as discussions around the data breach intersect with broader U.S.-South Korean diplomatic relations. The lack of stringent laws and enforcement measures in the U.S. has historically shielded American companies from facing similar sanctions or criminal charges for data breaches.