South Korea slaps Coupang with record $400 million data breach fine

The breach, uncovered in December 2025, granted a former employee unauthorized access to sensitive information including shipping addresses, order histories, and contact details for roughly two-thirds of South Korea’s population. Often described as the Amazon of Asia, the U.S.-headquartered retailer maintains that the incident was an isolated failure, and company representatives have already confirmed plans to challenge the ruling in court.

This confrontation highlights a growing tension between South Korean regulatory enforcement and U.S.-based firms. While domestic lawmakers have pushed for aggressive accountability, reports suggest that American officials have attempted to frame the regulatory action as a matter of bilateral diplomatic concern. Such intervention is unusual, as U.S. companies frequently navigate data breaches without facing the level of financial or criminal scrutiny now being applied in Seoul. The outcome of Coupang’s appeal will likely set a precedent for how foreign corporations operating in South Korea manage local data privacy standards under increased government pressure.