South Korea's data protection regulator has imposed a record 409 million dollar fine on Coupang, the country's leading e-commerce platform, for a massive data breach. The penalty surpasses the previous record of 134.8 billion won (88.8 million dollars) levied against SK Telecom earlier this year.
The Personal Information Protection Commission (PIPC) determined that Coupang failed to adequately protect user data, leading to the exposure of sensitive personal information. The fine is the largest ever issued by the commission for a personal data breach, underscoring Seoul's increasingly aggressive enforcement posture.
Coupang has not yet publicly detailed the specific technical vulnerabilities exploited in the breach. However, regulators cited inadequate security measures and a slow response as key factors in the unprecedented penalty. The case highlights the growing financial risks companies face under South Korea's strict data protection laws.
The company is expected to appeal the decision, arguing that the fine is disproportionate compared to similar incidents globally. Coupang has stated it will cooperate fully with regulators while pursuing legal remedies.
This record penalty signals a hardening regulatory environment for data handlers in South Korea. It follows a pattern of escalating fines across Asia, as governments seek to hold corporations accountable for lapses in cybersecurity and privacy.