Coupang: "Investigation Conducted Under Government Instructions... Obtained Perpetrator's Confession and Recovered Devices" (Comprehensive)

Coupang Refutes Government's Claim of 'Unilateral, Unverified Announcement'
"Considering Public Anxiety... Facts About Cooperation Must Be Disclosed"

"Coupang's investigation was not a 'self-conducted' investigation. It was carried out over several weeks in close daily cooperation with the government, in accordance with government instructions."

In response to the government's statement that Coupang's internal investigation results regarding the massive leak of 33.7 million customer records were unilateral and unverified by the company, Coupang explained, "Under the government's instructions, we obtained a full confession from the perpetrator, recovered all devices used in the leak, and secured key facts about the leaked customer information."

Evidence materials secured by Coupang through investigation and reported to the government public-private joint investigation team. Provided by Coupang

In a press release distributed on the 26th, Coupang stated, "The repeated, incorrect claims that we conducted an independent investigation without government oversight are creating unnecessary anxiety," and added, "Since this data breach has caused significant concern among the public, we wish to clarify the facts about our cooperation with the government." The company further noted, "Whenever we obtained new facts, statements, or equipment from the perpetrator, we immediately submitted them to the government."

This is Coupang's rebuttal after the government dismissed Coupang's previous day's announcement-regarding obtaining the perpetrator's confession and recovering the hacking equipment-as a 'unilateral claim.' Coupang explained, "On the 1st, we met with the government and promised full cooperation. On the 2nd, we received an official document from the government regarding the leak incident, and for several weeks afterward, Coupang worked with the government almost daily to track, contact, and communicate with the perpetrator." The company continued, "On the 9th, the government suggested that Coupang contact the perpetrator, and on the 14th, we met the information leaker for the first time," emphasizing, "We reported these facts to the government."

Coupang also stated, "On the 16th, following government instructions, we conducted the first recovery of the information leaker's desktop and hard disk drive, reported this to the government, and provided the devices." The company added, "We understand that the government began its investigation of the hard disk drive immediately upon submission." According to Coupang, at that time, the government requested that Coupang recover additional devices from the perpetrator.

Coupang continued, "On the 18th, we recovered the perpetrator's MacBook Air laptop from a nearby stream. In accordance with government instructions, we deployed a forensic team, secured physical evidence, documented the findings, and immediately handed over the laptop to the government." The company added, "On the 21st, the government authorized Coupang to submit the hard drive, the laptop, and three written statements (including fingerprinted documents) to the police." Coupang emphasized, "Despite receiving unfair criticism from government agencies, the National Assembly, and some media outlets for allegedly not taking the data breach seriously, we strictly complied with the government's instructions to maintain confidentiality of the investigation and not to disclose details of the investigation process."

Coupang stated, "At the government's request, on the 23rd, we held an additional briefing on the details of the investigation, including matters related to our cooperation with the government," and added, "On the 25th, we informed Coupang customers about the progress of the investigation." The company further emphasized, "We are fully cooperating with the ongoing government investigation and will take all necessary measures to prevent secondary damage."