South Korea hits Coupang with a fine of more than $400 million over a data breach that affected millions

South Korean authorities have imposed a record fine of 624 billion won (more than $400 million) on retail giant Coupang after a data breach last year compromised the personal data of more than 34 million customers.

The Seoul Personal Information Protection Commission issued the maximum penalty on Thursday after discovering the breach In December 2025. The retail giant, which is headquartered in the United States but popular in South Korea and likened to the “Amazon of Asia,” said a months-long data breach allowed a former employee to obtain the names, email, shipping addresses, phone numbers and order histories of about two-thirds of South Korea’s population.

Cobang said BBC News They plan to appeal the regulatory body’s decision. The fine represents a rare case of financial sanctions issued against a US-based company. Korean legislators He was accused Some US counterparts applied political pressure after reports that US representatives were linking the data breach to bilateral relations between the US and South Korea in response to the case against Coupang executives.

U.S. companies rarely face financial penalties or criminal prosecution for data breaches due to a lack of laws and enforcement authorities.