Now Hacked
EN
Data breach

Coupang breach exposes about 33.7 million customer personal information records

First reported · Last reported · 678 related reports

About 33.7 million customer personal information records, including delivery addresses and order histories, were leaked from Coupang. Coupang launched an investigation after receiving a customer complaint on November 16, 2025, and the theft of authentication keys by a former employee was subsequently identified as the cause. Coupang recommended changing shared building entrance codes, and the personal data breach led to financial penalties and dispute mediation.

Key facts

Affected organization
Coupang
Incident type
Data breach
Occurred / detected
2025-11-16
Scale of damage
About 33.7 million customer personal information records
Cause / method
Theft of authentication keys by a former employee
Location
South Korea

If your data was exposed

Exposed dataAddressUsage & purchase history

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
  2. If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Center ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗

Lookup and notice links are official pages found by AI. Make sure the address is on the organization’s official domain before using it.

Timeline

  1. Coupang received a customer complaint and launched an investigation into the personal data breach.
  2. The scale of the personal data breach expanded to about 33.7 million records.
  3. Coupang revised its data breach notice and recommended changing shared building entrance codes.
  4. The theft of authentication keys by a former employee was identified as the cause of the breach, and the government said it would consider suspending the company’s operations.
  5. Coupang was fined KRW 624.6 billion over the personal data breach.
  6. A court upheld the effect of a KRW 423.5 billion fine and temporarily suspended the corrective order.

678 related reports

  • Data breachCoupang

    Data of about 135,000 Coupang couriers and 22,440 customers leaked

    135KImpact: Real names and phone numbers of about 135,000 couriers and information on 22,440 orderers and recipients

    The real names and phone numbers of about 135,000 Coupang Eats couriers were exposed, and information on 22,440 orderers and recipients was leaked through the seller system. The Personal Information Protection Commission (PIPC) imposed fines and penalties totaling about 1.6 billion won for violations including failures in safeguards and breach notification obligations. A class action lawsuit was later filed over the leak of Coupang Eats couriers' personal data.

    Related reports: 4 · last report →

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.