Coupang Hit with $409M Data Breach Fine

Coupang fined $409 million by South Korea over data breach

South Korea’s Personal Information Protection Commission announced a penalty of 624.7 billion won, equivalent to $409 million, against Coupang LLC, the U.S.-listed e‑commerce firm (NYSE: CPNG). The fine represents the largest privacy penalty ever imposed in South Korea.

The sanction follows a massive data breach that occurred late last year, in which the personal details of more than 33 million users were leaked, making it one of the country’s biggest data breaches on record. Korean authorities concluded that the breach resulted primarily from management failures rather than a sophisticated cyber‑attack, leading to significant public and lawmaker criticism.

In the market reaction, Coupang’s shares, which trade on the New York Stock Exchange, have declined 35 % year‑to‑date in 2026 after the fine and breach were disclosed.