South Korea's data protection authority has handed e-commerce giant Coupang a record fine of 409 million USD (approximately £320 million) following a massive data breach that compromised the personal information of around 30 million users. The penalty, announced by the Personal Information Protection Commission (PIPC), is one of the largest ever levied in the country for a data security failure.
The breach, which occurred in 2023, exposed sensitive customer data including names, home addresses, phone numbers, and payment card details. Investigators found that Coupang had not deployed adequate encryption or access controls, and that it failed to promptly notify affected customers after the incident was discovered. The PIPC also criticised the company's slow response and lack of transparency during the investigation.
Coupang, often described as the 'Amazon of South Korea', operates one of the country's largest online marketplaces and logistics networks. The company has disputed the fine, arguing that it took immediate remedial steps and cooperated with authorities. However, regulators maintained that the scale of the breach and the company's negligence warranted the maximum penalty under South Korean data protection law.
The case is being closely watched by international investors and tech firms, particularly as data privacy regulations tighten across Asia and Europe. For UK-based investors with exposure to Asian e-commerce or technology funds, the fine highlights the financial and reputational risks associated with weak data governance. Analysts at Shore Capital noted that regulatory action in South Korea could set a precedent for similar enforcement in other jurisdictions, including the UK under the Data Protection Act.
The PIPC has also ordered Coupang to overhaul its data security systems and submit regular compliance reports. The company faces potential class-action lawsuits from affected users, which could add further financial strain. Shares in Coupang, which is listed on the New York Stock Exchange, fell by 4.2% in after-hours trading following the announcement.