---
title: "Data breach at Coupang"
description: "Coupang, South Korea's largest online retailer, acknowledged unauthorized access to the personal data of 33.7 million customers. Access began on 24 June 2025 and was only detected on 18 November, starting from customer accounts. The data involved includes names, email addresses, phone numbers, deliv"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-10-08-coupang
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-10-08
dateModified: 2026-10-08
---
# Coupang

Data breach — High

Coupang, South Korea's largest online retailer, acknowledged unauthorized access to the personal data of 33.7 million customers. Access began on 24 June 2025 and was only detected on 18 November, starting from customer accounts. The data involved includes names, email addresses, phone numbers, delivery addresses and part of the order history. According to the police, the main suspect is a former employee who allegedly used access to an authentication management system after leaving in 2024; the company states that login credentials and payment card data were not reached. As of October 2026, press reports say Coupang is challenging in court the 624.6 billion won fine imposed by the data protection authority (PIPC), which itself cites about 37.55 million people affected.

These contact details and order histories let a malicious third party build credible phishing or fraudulent solicitation attempts that cite the person's identity, address or recent purchases.

| Fact | Value |
| --- | --- |
| Disclosed on | October 8, 2026 |
| Incident dated | June 24, 2025 |
| Accounts affected | 34M |
| Sector | Retail |
| Country | South Korea |
| Cause | Direct intrusion |
| Severity | High |
| Status | Confirmed |

## Exposed data

- Full name
- Email address
- Phone number
- Postal address
- Order history

## What you can do

- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [KR: Coupang files lawsuits against 620 billion won fine over data leak](https://databreaches.net/2026/10/08/kr-coupang-files-lawsuits-against-620-billion-won-fine-over-data-leak/) — DataBreaches.net
- [Personal information of 33.7 million stolen from Coupang](https://www.securityweek.com/personal-information-of-33-7-million-stolen-from-coupang/) — SecurityWeek
- [South Korea's answer to Amazon admits breach exposed 33.7M customers](https://www.theregister.com/2025/12/01/coupang_breach/) — The Register
- [Former Coupang employee linked to data breach exposing 33.7 million customer records](https://www.teiss.co.uk/news/former-coupang-employee-linked-to-data-breach-exposing-337-million-customer-records-16853) — TEISS
- [South Korea hits Coupang with record $409 million fine over data breach](https://bleepingcomputer.com/news/security/south-korea-hits-coupang-with-record-409-million-fine-over-data-breach) — BleepingComputer
- [Coupang sues to overturn $462 million fine over data leak](https://www.koreajoongangdaily.com/business/coupang-sues-to-overturn-462-million-fine-over-data-leak/12912217) — Korea JoongAng Daily

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-10-08-coupang
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees