ON
← Back to feed
HKCulture10 days ago

South Korea hits e-commerce giant Coupang with record US$409 million fine for data breach

South Korea has fined e-commerce giant Coupang a record $409 million for a data breach that exposed the information of over 30 million customers. The Personal Information Protection Commission cited inadequate security measures, including poor management of authentication keys and weak access controls. The breach led to criticism from U.S. lawmakers and highlighted tensions between Seoul and Washington.

South Korea imposed on Thursday a record US$409 million fine on e-commerce giant Coupang over a leak that exposed the data of more than 30 million customers, provoking ire from US lawmakers.

The move caps a months-long probe into the country’s largest online retail platform, which is incorporated in the United States .

Allegations of a massive data leak first surfaced in November, becoming an unexpected source of friction between Seoul and Washington.

“We have decided to impose a total of 624.68 billion won in fines … on Coupang for violating safety obligations and collecting personal data without legal grounds,” a Personal Information Protection Commission statement said.

“Inadequate basic safeguards, including poor management of authentication signing keys and lax access controls” resulted in the personal data of around 37.5 million users being exposed, the commission said.

A worker drives a delivery truck of South Korean e-commerce giant Coupang in Seoul. Photo: AFP

Commission chair Song Kyung-hee told a press briefing on Thursday that the retail giant should have notified affected individuals within 72 hours.

Read the full article at South China Morning Post
Source document: Personal Information Protection Commission statement

1 reports

South China Morning PostParty-alignedCenter10 days ago
South Korea hits e-commerce giant Coupang with record US$409 million fine for data breach

South Korea has fined e-commerce giant Coupang a record $409 million for a data breach that exposed the information of over 30 million customers. The Personal Information Protection Commission cited inadequate security measures, including poor management of authentication keys and weak access controls. The breach led to criticism from U.S. lawmakers and highlighted tensions between Seoul and Washington.

Bias read (Center): The article presents factual details about the data breach, the investigation, and the regulatory response without overtly favoring any political side. It includes quotes from official sources and does not exhibit biased language or selective sourcing.

Official sources cited

  • government Personal Information Protection Commission statement
  • government Commission chair Song Kyung-hee press briefing

Go to the primary sources (2)

The official sources this coverage is built on. Read them directly to bypass framing.

  • governmentPersonal Information Protection Commission statement
  • governmentCommission chair Song Kyung-hee press briefing