Audio By Carbonatix
South Korea has hit online retail giant Coupang with a record fine of more than $400m (£299m) over a massive data breach that exposed the data of more than 30 million customers last year.
The fine is the largest ever issued by Seoul's Personal Information Protection Commission (PIPC) for a data breach.
The leak exposed the names, contact and delivery details and order histories of some customers of Coupang, South Korea's largest e-commerce platform, often described as its equivalent of Amazon.
Coupang told the BBC it "deeply regrets the concern caused" and that it will strengthen its security measures, but added that it planned to challenge the PIPC decision.
The number of accounts affected by the incident exceeds half of South Korea's population of around 50 million.
The PIPC announced on Wednesday a 423.6bn won fine for the personal data breach and an additional 201bn won for the non-consensual collection of information.
The commission found that a lack of safeguards, including poor management of authentication signing keys and access controls, had resulted in the personal data of around 37.5 million users being exposed.
Coupang said that its explanations and measures to prevent further harm from the data breach "were not sufficiently reflected" in the commission's decision.
"Upon receiving the official resolution from the PIPC, we expect that the facts will be clearly established through legal procedures," said Coupang.
The decision follows a months-long probe into Coupang after allegations of the data leak surfaced in November.
The company is based in the US, but the majority of its revenue comes from South Korea.
Coupang told the BBC at the time that it was alerted to a breach involving 4,500 customer accounts in November and immediately reported it to the authorities.
But the company said that later checks found that nearly 34 million customer accounts - all in South Korea - were likely exposed. It added that the breach is believed to have begun as early as June through a server based abroad.
Following the breach, Coupang's boss Park Dae-jun resigned from his role, apologising for the incident. The platform's chief administrative officer, Harold Rogers, was appointed interim CEO.
South Korean firms faced a series of high-profile cybersecurity incidents last year despite the country's reputation for tight data privacy standards.
Its largest mobile operator, SK Telecom, was fined nearly $100m over a data breach involving more than 20 million subscribers.
Latest Stories
-
EPA orders immediate halt to unpermitted reclamation and dredging nationwide
1 minute -
Afenyo-Markin’s lawsuit against Sammy Gyamfi takes focus away from development – Kpebu
16 minutes -
FWSC urges media to guard against misinformation in proposed IPEC transition
17 minutes -
MoMo Fest 2026: Shatta Wale to Rock Accra Stadium on October 17
18 minutes -
GTEC’s letter directing public universities to reopen by October 16 is unprofessional – GAUA
39 minutes -
Suspect in viral video assaulting wife jailed for 3 months
39 minutes -
GAUA insists strike will end only after Fair Wages addresses market premium issue
40 minutes -
Kpemka seeks compensation as he sues BOST over alleged unlawful termination
43 minutes -
GES asks applicants to check status of 2026 promotion applications on October 15
1 hour -
Kobe Boujee joins Olympics.com team for Dakar 2026 Youth Olympic Games
1 hour -
Slaty egret’s shifting nesting sites offer clues to changing ecosystems
1 hour -
First phase of arrears for promoted teachers to be paid on Friday – Haruna Iddrisu announces
1 hour -
Caveman Watches partners with Mfantsipim School for 150th anniversary
2 hours -
We’ll pursue GH¢15m defamation suit against Sammy Gyamfi to its logical conclusion – Afenyo-Markin’s lawyers
2 hours -
Martin Kpebu urges Afenyo-Markin not to return to court over Sammy Gyamfi lawsuit
2 hours