South Korea Fines Coupang Record $409 Million for Data Breach and Illegal Data Collection
South Korea's Personal Information Protection Commission imposed a record 624.7 billion won (approximately $409 million) fine on e-commerce giant Coupang on Thursday over a data breach affecting up to 37.5 million users and unauthorized data collection from 11.17 million others. The fine, the largest ever levied for a data breach in South Korea, follows a months-long investigation that found the breach resulted from inadequate safety management rather than sophisticated hacking, and that Coupang delayed required breach notifications. The case has strained U.S.-South Korea relations, with American lawmakers and investors alleging discriminatory treatment of the U.S.-listed company, while Coupang has signaled it will challenge the fine in court.
South Korea's data protection regulator fined Coupang Corp., the country's largest e-commerce platform, a record 624.7 billion won — roughly $409 million — on Thursday for a data breach that exposed the personal information of approximately 37.5 million users, including names, phone numbers, and delivery details. The Personal Information Protection Commission broke the fine into two components: 423.6 billion won for the data breach itself and 201.1 billion won for the unauthorized collection of online activity records from 11.17 million users on third-party websites and apps. Regulators concluded the breach was caused not by sophisticated hacking but by Coupang's own failures, including poor management of authentication signing keys, lax access controls, and delayed breach notifications that deprived affected users of the chance to protect themselves. A separate 248 million won fine was imposed on Coupang's logistics subsidiary, Coupang Fulfillment Services, for privacy violations including maintaining an unlawful employment restriction list of journalists. The case has become a diplomatic flashpoint: U.S. Republicans accused South Korean authorities of discriminatory treatment of the American-listed firm, nearly 100 South Korean lawmakers pushed back against what they described as undue U.S. political pressure, and the dispute reportedly affected high-level security talks between the two allies. Coupang, which is incorporated in the United States but derives most of its revenue from South Korea, apologized for the breach while expressing regret that its remedial measures were not reflected in the commission's decision, and confirmed it intends to contest the ruling through legal proceedings.
What's missing
The sources do not detail what specific legal protections for Coupang chairman Kim Bom-suk the U.S. government reportedly demanded as a condition for resuming security talks.
How coverage differed
Most outlets reported the facts similarly, but Al Jazeera provided additional detail on the alleged perpetrator — a former employee identified as a Chinese national who stole a security key — framing the breach more explicitly as a management and oversight failure. TechCrunch emphasized the broader regulatory context, noting that U.S. companies rarely face financial penalties for data breaches due to weaker domestic enforcement, subtly framing the fine as a contrast to American norms.
What different sources said
- Al JazeeraLeft
South Korea fines Coupang $408m over biggest data leak in country’s history
- NYT WorldLeft
‘Amazon.com of South Korea’ Is Fined a Record $409 Million
- FortuneCenter
South Korea fines Coupang record $409 million for data breach
- South China Morning PostCenter
South Korea hits e-commerce giant Coupang with record US$409 million fine for data breach
- Channel NewsAsiaCenter
South Korea fines Coupang $409 million in country's largest data breach penalty
- UPICenter
Coupang fined record 624.7 billion won over massive data breach, unauthorized data collection
- Financial TimesCenter
‘South Korea’s Amazon’ hit with record fine over data breach
- TechCrunchCenter
South Korea hits Coupang with $400M+ fine for data breach that affected millions
- Yahoo FinanceCenter
Stock Market Today, June 11: Coupang Jumps After Privacy Fine Lands Below Worst Case Fears
Related
Samsung Galaxy S25 and S25 FE See Significant Price Cuts
Samsung's Galaxy S25 and Galaxy S25 FE smartphones are currently available at notably reduced prices, with the S25 FE dropping $201 (33%) to $449 on Woot for a limited time. The price reductions come amid a competitive smartphone market and ahead of anticipated future Samsung releases. The discounts make previously premium-priced devices more accessible to budget-conscious consumers.
Anthropic Disables Fable 5 and Mythos 5 AI Models Globally After US Government Export Control Order
Anthropic has suspended all public access to its two most advanced AI models, Fable 5 and Mythos 5, after the US Commerce Department issued an export control directive ordering the company to block foreign nationals from accessing them on national security grounds. The order came just three days after Fable 5's public launch and reportedly stems from government concerns about a potential jailbreak that could enable the models to assist with cyberattacks, though Anthropic says it received only verbal evidence of a narrow, non-universal vulnerability. The shutdown affects all customers globally — including enterprise users and Anthropic employees — and marks a significant escalation of US efforts to restrict foreign access to advanced AI models themselves, rather than just the chips that power them.
Xbox Free Play Days Offers Three Games Free to Play June 11–14
Microsoft's Xbox Free Play Days program is offering Hell Let Loose, State of Decay 2: Juggernaut Edition, and Blasphemous 2 at no cost from June 11 to June 14. Hell Let Loose requires an Xbox Game Pass Ultimate, Premium, or Essential membership, while State of Decay 2 and Blasphemous 2 (via a five-hour timed trial) are accessible to all Xbox console owners. Players who wish to keep any of the games can purchase them at a limited-time discount and retain any achievements earned during the free period.