
SEOUL - South Korea will fine e-commerce giant Coupang 625 billion won ($409.30 million) over a massive leak of customer information last year and illegal collection of personal information, in the country's largest data breach penalty on a company.
The Personal Information Protection Commission said the New York-listed company had leaked personal data of more than 33 million customers and failed to detect the breach within the 72 hours required by the law.
The fine amounts to 1.4 percent of Coupang's revenue of 45 trillion won in 2025, according to Reuters' calculation.
"This accident occurred due to Coupang's lack of safety measures and systems, not sophisticated hacking," Song Kyung-hee, the chairperson of the privacy regulator, told a briefing on Thursday.
After the fine was announced, Coupang apologized for having caused concern to the public and its customers.
However, the company said that "we regret that our proactive measures to prevent secondary harm from last year's data leak incident, as well as our explanations based on clear facts, were not sufficiently reflected" in the regulator's decision.
Seattle-based Coupang generates most of its revenue in South Korea, offering fast delivery of groceries, food and other goods.
The penalty followed a finding by a government-led investigation earlier this year that blamed the breach on management failure.
ALSO READ: Coupang founder Kim Bom apologizes for data leak, pledges compensation
South Korea's science ministry at the time said that a former employee stole a security key and gained unauthorized access to customer accounts.
Song said Coupang's security system allowed a hacker to easily access the personal information of all of its customers, even after the suspect left the company.
The firm also failed to detect an unusual increase in traffic to its customer data until it was alerted by a customer's inquiry, she added.
Separately, the regulator found the company's marketing program illegally collected information on online activities of around 11 million customers without their agreement, Song said.
READ MORE: South Korea says US trade friction unrelated to Coupang probe
The firm is estimated to control about 40 percent of South Korea's logistics services, the largest market share among peers, according to Seoul-based IM Securities.
"Coupang has grown its e-commerce service significantly based on vast customer data," Song said. "But the company did not have a system to protect and manage customer information despite its business scale."
