Coupang Faces Massive Data Breach, Regulatory Scrutiny, and International Manhunt

Updated 2026-01-14 10:46:50+00:00 (52 articles)

Massive breach compromises 33.7 million users An internal probe disclosed that a former employee accessed personal data of about 33.7 million Coupang customers, roughly two‑thirds of South Korea’s population[1][2][3][4]. The stolen information included names, phone numbers and delivery addresses, but only data from roughly 3,000 accounts was recovered and later deleted[1][2][3]. Prosecutors have issued an arrest warrant for the Chinese‑national suspect and have asked China and Interpol for assistance in his capture[4]. The breach prompted a parliamentary hearing and a formal police task force to investigate the incident and the company’s response[2].

Regulators demand verified information and user‑facing tools The Personal Information Protection Commission ordered Coupang to remove its independent probe results, calling them unverified and potentially confusing to the public[1]. It also urged the e‑commerce giant to embed a simple breach‑lookup function in its app and website so users can verify whether their data was affected[1]. The Fair Trade Commission’s chief warned that a temporary suspension of Coupang’s operations could be imposed if consumer relief is insufficient[3]. Both agencies emphasized that official investigations remain ongoing and that any obstruction, such as delayed document submission, may attract penalties[1][3].

Police summon interim CEO and consider travel ban Seoul Metropolitan Police summoned interim CEO Harold Rogers for questioning about the breach and notified the Ministry of Justice of his whereabouts[2]. After attending a two‑day parliamentary hearing, Rogers left Korea on Dec 31, and authorities are weighing an overseas travel ban should he return[2]. The police task force will also verify the truthfulness of Rogers’ National Assembly testimony while pursuing the suspect’s extradition[2]. The Justice Minister reported that Beijing has not yet responded to South Korea’s extradition request, complicating the repatriation effort[4].

FTC expands probe to broader business practices Beyond the data breach, the Fair Trade Commission is reviewing Coupang’s overall business conduct, including alleged loss‑shifting onto partner suppliers[3]. The commission plans to issue rulings on these supplier‑loss allegations shortly, signaling a wider regulatory crackdown[3]. The Science Ministry criticized Coupang’s internal findings as one‑sided, noting that a joint public‑private investigation with the Personal Information Protection Commission remains unresolved[3]. These overlapping inquiries illustrate the mounting pressure on Coupang from multiple government bodies[1][3].