Coupang Data Breach Exposes 34 Million Customers Personal Information

Coupang Data Breach Exposes 34 Million Users in Major Security Failure

South Korean e-commerce giant Coupang reported a massive data breach over the weekend. The incident compromised the personal information of nearly 34 million customers. The unauthorized access went undetected for over five months.

The company confirmed the scale of the breach after an initial, smaller discovery. This is a severe security lapse for one of Asia’s leading online retailers.

Coupang data breach

Investigation Uncovers Months of Unchecked Access

Coupang first found a problem on November 18. It detected 4,500 user accounts were exposed. A deeper probe revealed the true, staggering scale.

The breach impacted about 33.7 million customer accounts in South Korea. According to information shared with TechCrunch, the access began on June 24, 2025.

The leaked data includes names, email addresses, and phone numbers. Shipping addresses and some order histories were also exposed. More sensitive financial data was not compromised.

Payment information and login passwords remain secure. The company has reported the incident to South Korean authorities.

Broader Impact on Consumer Trust and Cybersecurity

This breach severely damages consumer confidence in a major platform. Coupang operates the popular “Rocket Delivery” service in South Korea.

It also runs marketplaces in Japan and Taiwan. Data from those regions was not affected, according to the company.

Police have identified at least one suspect. The suspect is a former Chinese employee now living abroad.

This incident is part of a worrying trend in South Korea. The country has faced several major cybersecurity incidents this year. Coupang itself has suffered previous, smaller data leaks.

This Coupang data breach highlights the persistent vulnerabilities in digital commerce. It serves as a critical reminder for all companies to continuously strengthen their cyber defenses.

A quick knowledge drop for you

What personal information was stolen in the Coupang breach?

The breach exposed names, email addresses, phone numbers, and shipping addresses. Certain customer order histories were also leaked. Financial data like credit card numbers was not accessed.

Were user passwords and payment details compromised?

No. Coupang states that login credentials and payment information remain secure. The breach did not compromise this more sensitive financial data.

Who is affected by this data breach?

Approximately 33.7 million customers in South Korea are affected. The company says data from its Taiwan and Japan operations was not involved in this incident.

What is Coupang doing in response to the leak?

The company blocked the access route and strengthened internal monitoring. It has also hired external security experts and reported the breach to national authorities.

How long did the data breach go undetected?

The unauthorized access began on June 24, 2025. It was discovered on November 18, meaning it lasted for nearly five months.