Coupang Apologizes After Massive Data Breach Affecting 33.7 Million Users

South Korea’s largest online retailer, Coupang, has issued a public apology after confirming that personal information from 33.7 million customer accounts was exposed through unauthorized data access. CEO Park Dae-jun posted a statement on the company’s website, expressing regret for the incident and acknowledging the inconvenience caused to its customers.

The data breach is one of the largest in South Korea’s recent history and follows several high-profile security incidents involving major companies, including SK Telecom. In response, the South Korean government held an emergency meeting to assess the situation. Minister of Science and ICT Bae Kyung-hoon said authorities are investigating whether Coupang failed to comply with personal information protection regulations.

According to Coupang, the company first detected the breach on November 18 and immediately reported it to relevant authorities. It is now cooperating with law enforcement and regulatory bodies as the investigation continues. Coupang, often referred to as the “Amazon of South Korea,” serves millions through its popular Rocket Delivery service and recorded 24.7 million active users in the third quarter of the year.

Local media, including Yonhap News Agency, reported that a former Chinese employee is suspected of involvement in the unauthorized access. Police have launched an investigation after receiving a complaint from Coupang earlier this month. The company did not provide further comment outside regular business hours.

Coupang confirmed that the compromised data includes customer names, email addresses, phone numbers, shipping addresses, and parts of their order histories. However, payment information and login credentials were not exposed. The company also revealed that the unauthorized access likely began on June 24 via overseas servers.

Following the breach, the Korea Internet & Security Agency issued a public advisory urging affected users to stay alert for phishing attempts and other potential scams. As South Korea continues to strengthen cybersecurity measures, the Coupang breach highlights the growing risks faced by digital platforms and the increasing need for robust data protection practices.