South Korean President Lee Jae Myung demands swift punishment after a massive Coupang data breach exposed personal information of over 33 million customers.
 |
| South Korea faces escalating cybersecurity pressure as a Coupang data breach exposes millions of customers’ personal data, prompting government calls for stringent action. Image: CH |
SEOUL, South Korea — December 2, 2025:
South Korea is confronting yet another high-profile cybersecurity crisis following a massive data breach at Coupang, the country’s largest online retailer. President Lee Jae Myung has called for “swift and severe penalties” against those responsible, describing the company’s failure to detect the intrusion for five months as “astonishing” and underscoring the “massive” scale of the damage. Over 33 million customers had personal information exposed, including names, email addresses, phone numbers, shipping addresses, and some order histories, though payment details and login credentials reportedly remained secure.
The breach, which occurred between June 24 and November 8 via overseas servers, has ignited public outrage over Coupang’s delayed response. Police are investigating the suspected perpetrator, a former employee of Chinese nationality, and tracing IP addresses while examining potential international cooperation behind the attack. President Lee has directed regulators and ministries to implement “substantive and effective countermeasures” and hold those responsible strictly accountable, emphasizing both fines and punitive damages.
The Coupang incident comes amid a spate of sophisticated cyberattacks targeting South Korea, one of the world’s most digitally connected nations. In August, SK Telecom was fined approximately 134 billion won ($91 million) after hackers compromised data on nearly 27 million users. Investigations into previous incidents have revealed links to North Korean operatives, including the theft of sensitive court financial records over a two-year period and the unauthorized withdrawal of 44.5 billion won in digital assets from cryptocurrency exchange Upbit. These patterns highlight the persistent threat posed by state-sponsored or highly skilled hacking groups.
The breach at Coupang is emblematic of the broader cybersecurity challenges facing South Korea. As digital services expand and e-commerce platforms handle increasingly sensitive personal data, the stakes of failing to secure these systems have never been higher. The government’s aggressive response signals a willingness to tighten regulatory scrutiny, increase fines, and prioritize rapid accountability, aiming to reassure the public while deterring future breaches.
Ultimately, the Coupang case underscores the urgent need for stronger cybersecurity infrastructure, faster detection systems, and international cooperation. With millions of citizens affected and the nation’s reputation for digital connectivity on the line, South Korea is under pressure to demonstrate that it can protect personal data and maintain public trust in the digital age.