Korean authorities have hit e-commerce platform Coupang with a record KRW 624.7 billion (US$408 million) fine for last year’s data breach involving almost 34 million users.

The penalty is the largest levied for privacy breaches in Korea, and was justified by the Personal Information Protection Commission because of the scale of the incident. 

Coupang said in a statement today that it regretted the Personal Information Protection Commission's decision to “not sufficiently reflect the proactive measures we took to prevent secondary harm following last year's data breach incident, as well as our explanations based on clear factual circumstances”.

“After receiving the official written decision from the Personal Information Protection Commission, we look forward to having the facts clearly established through the legal process,” Coupang said.

Related:

10 Feb 2026: Management flaws behind Coupang breach, Korean investigation finds; Ministry says U.S.-headquartered e-commerce company violated data-preservation orders, lays out remediation timetable