Tatwan mulls penalties after CoupaNg breach affects users: CNA

Tatwan mulls penalties after CoupaNg breach affects users: CNA

South Korea Considers Stricter Penalties Following Coupang Data Breach: CNA

South Korea is reevaluating its regulatory framework in response to a massive data breach at e-commerce giant Coupang, which exposed the personal information of approximately 33.7 million users. The incident, first detected in June 2025 and disclosed in November, has sparked calls for harsher penalties for corporate data security lapses. President Lee Jae Myung emphasized the need for stronger enforcement, stating the breach highlighted systemic weaknesses in digital privacy protections.

The breach, attributed to a former employee exploiting vulnerabilities in Coupang's authentication systems, has triggered a multi-agency investigation and public backlash. South Korea's Personal Information Protection Commission (PIPC) ordered Coupang to revise terms of service clauses that previously exempted the company from liability for hacking-related damages. The government has also proposed increasing fines for data breaches from 3% to 10% of annual revenue, with some lawmakers citing the Coupang case as justification.

Financial repercussions for Coupang are significant. The company reported a fourth-quarter 2025 net loss of $26 million, its first in years, as user trust eroded and competitors poached customers. Coupang has allocated $1.18 billion in compensation for affected users and announced enhanced security measures. However, the South Korean Science Ministry criticized the company's delayed detection of the breach and inadequate response.

The controversy has escalated internationally. U.S.-based investors have invoked the U.S.-Korea Free Trade Agreement (KORUS) to challenge South Korea's regulatory actions, alleging discriminatory treatment. They argue that penalties imposed on Coupang—such as operational restrictions and potential $700 million fines—disproportionately harm U.S. stakeholders. The U.S. Trade Representative is now reviewing the dispute, with possible trade remedies, including tariffs, under consideration.

South Korea's Trade Minister Yeo Han-koo has denied allegations of bias, insisting the government's response is grounded in legal obligations. As the case unfolds, it underscores the growing tension between data privacy enforcement and international investment protections in the digital age.

Reuters, Dec 2025: Reuters, Dec 2025
CPO Magazine, Jan 2026: CPO Magazine, Jan 2026
Channel News Asia, Feb 2026: Channel News Asia, Feb 2026
Reuters, Jan 2026: Reuters, Jan 2026
Korea Joongang Daily, Dec 2025: Korea Joongang Daily, Dec 2025