Coupang Reports 33.7 Million Personal Data Breach to U.S. SEC for First Time... "Exposed to Financial Losses"

Report Filed via 8-K Current Disclosure
National Assembly Hearing on the 17th; Bom Suk Kim Absent

Coupang, which caused an unprecedented personal data breach affecting 33.7 million people, has officially reported the incident to the U.S. Securities and Exchange Commission (SEC).

Harold Rogers, the newly appointed CEO of Coupang, and other witnesses are taking an oath at the hearing related to the Coupang breach incident held on December 17, 2025, at the National Assembly's Science, Technology, Information and Broadcasting and Communications Committee. Photo by Kim Hyunmin

According to the SEC on December 17, Coupang Inc., the Korean parent company of Coupang, submitted an "8-K report" on December 16 under the heading "Item 1.05 Cybersecurity Incident." The 8-K report is a current report that must be filed immediately when an event occurs that could have a significant impact on investors' decisions. Coupang stated that December 15 was the earliest point at which it recognized the incident as a material event.

In the report, Coupang stated, "Coupang initiated its response procedures immediately after becoming aware of the incident, blocked unauthorized access by the perpetrator, reported the matter to Korean regulatory and investigative authorities, and notified customers who may have been affected."

Coupang further explained in the report that the former employee involved did not disclose the acquired data externally, and that no Coupang customers' bank information, payment card information, or login credentials (ID or password) were obtained or otherwise compromised as a result of the incident.

Coupang also stated, "Korean regulatory authorities have launched an investigation into the incident, and it is possible that one or more Korean regulatory agencies may impose financial penalties." The company added, "While there has been no significant disruption to Coupang's operations, we remain exposed to various risks, including potential revenue declines, increased recovery costs, regulatory fines, and litigation."

Meanwhile, on this day, Coupang will attend a hearing related to the 'large-scale personal data breach incident.' Bom Suk Kim, Chairman of Coupang Inc., submitted a notice of absence due to overseas commitments. Harold Rogers, Interim CEO of Coupang Korea, will be present at the hearing.