Coupang Hit With Record $409 Million Fine Over Data Breach Affecting 33 Million Users

South Korean e-commerce giant Coupang LLC (NYSE: CPNG) has been fined 624.7 billion won ($409 million) by the country’s privacy regulator following a massive data breach that exposed the personal information of more than 33 million users.

The Personal Information Protection Commission (PIPC) announced the penalty on Thursday, marking the largest privacy-related fine ever imposed in South Korea. The record sanction comes after an extensive government investigation into a data leak that occurred late last year and sparked widespread public concern.

According to authorities, the breach was largely caused by management and security oversight failures rather than an advanced external cyberattack. The investigation found that inadequate data protection measures contributed significantly to the exposure of sensitive user information, leading regulators to impose the historic penalty on the U.S.-listed e-commerce company.

The Coupang data breach ranks among the largest cybersecurity incidents in South Korea’s history, affecting over 33 million customers. The incident triggered strong criticism from lawmakers, consumer groups, and privacy advocates, who questioned the company’s ability to safeguard customer data and comply with data protection regulations.

The privacy watchdog emphasized the importance of stronger corporate accountability and cybersecurity practices, particularly for large digital platforms that handle vast amounts of personal information. The case is expected to serve as a benchmark for future enforcement actions under South Korea’s increasingly strict privacy laws.

The regulatory action adds to the challenges facing Coupang, which has been under pressure from investors amid growing concerns about governance and operational risks. Shares of Coupang (NYSE: CPNG) have fallen approximately 35% since the beginning of 2026, reflecting broader market concerns and the potential financial impact of the penalty.

Investors and market analysts will be closely monitoring how Coupang responds to the ruling, strengthens its cybersecurity infrastructure, and restores consumer trust following one of the country’s most significant data privacy scandals.