More than 30 million personal information leaked from South Korea's major online shopping site 'Coupang' - Possibility of leak due to internal culprit rather than external attack

It has been revealed that 33.7 million personal details have been leaked from Coupang, a major online retailer in South Korea.

Coupang criticized over lax spending on security in wake of large-scale hack
https://koreajoongangdaily.joins.com/news/2025-11-30/business/industry/2466485

Top South Korean e-commerce firm Coupang apologies over massive data breach
https://www.cnbc.com/2025/11/30/top-south-korean-e-commerce-firm-coupang-says-33point7-million-customer-accounts-breached.html

Coupang's announcement page contains a FAQ (frequently asked questions) regarding the personal information leak. According to the FAQ, Coupang became aware of unauthorized access to personal information related to 4,500 accounts on November 18, 2025. A subsequent investigation revealed that 33.7 million pieces of personal information had been leaked. The leaked information included names, phone numbers, email addresses, addresses, and order information; passwords and credit card information were not leaked.

[FAQ] FAQ
https://mc.coupang.com/ssr/desktop/contact/notice

In its financial results announcement for the third quarter of 2025, Coupang reported that it had 24.7 million active accounts with purchase history. The number of accounts confirmed to have been compromised this time exceeds the number of active accounts, indicating the scale of the impact.

Analysis by Coupang and investigative authorities revealed that suspicious access to a server located overseas occurred on June 24, 2025. Coupang also stated that 'no evidence of external intrusion has been found,' raising the possibility that the personal information leak may have been stolen by a Coupang employee. Some media outlets have also reported that 'a former Coupang employee, a Chinese national, is under investigation in connection with the personal information leak issue.'

Although Coupang ended its service in Japan in 2023, it launched a food delivery service called 'Rocket Now' in Tokyo in April 2025.