South Korean authorities have slapped retail giant Coupang with a record-breaking fine of over £325 million following a massive data breach that compromised the personal information of more than 34 million customers. The Personal Information Protection Commission issued this hefty penalty on Thursday, marking the maximum allowable amount after discovering the breach in December 2025.
Coupang, often compared to the 'Amazon of Asia', had admitted the long-term data leak allowed a former employee to access sensitive details including names, email addresses, shipping information, phone numbers and order histories. This incident affected about two-thirds of South Korea’s population, highlighting just how widespread the breach was.
The company has announced its intention to challenge the regulator's decision, claiming this is an unusual instance of a financial penalty levied against a U.S.-based firm. There are whispers in Korean political circles that American lawmakers may have applied pressure, linking the data breach with bilateral trade relations between the two countries.
While Coupang’s fine serves as a cautionary tale, it's worth noting that U.S. companies rarely face such financial sanctions or criminal penalties for similar breaches due to their less stringent laws and enforcement mechanisms.







