Coupang Confirms Over 165,000 Additional Personal Data Leaks

Additional Leak Confirmed for Around 165,000 Accounts
Investigation Into Top Management Also Underway

Coupang has confirmed that personal information from an additional approximately 165,000 accounts was leaked in connection with the personal data breach that occurred in November last year, and has notified the affected customers. Meanwhile, the police investigation into Coupang’s top management is also continuing.

On the 5th, Coupang announced that, in accordance with a recommendation from the Personal Information Protection Commission, it had individually notified customers of the additional leak. The newly confirmed leaked data consists of address book information that customers entered themselves and is limited to names, phone numbers, and addresses. Coupang stated that key sensitive information such as payment information, login credentials, email addresses, order history, and common-entrance passwords was not leaked.

Coupang stressed that the cases covered by this latest notification do not stem from a new incident, but were additionally identified in the course of investigating the personal data breach that occurred in November last year. The company also said it has strengthened internal monitoring and is operating an immediate response system, and that no suspected cases of secondary damage have been identified so far. Customers whose additional leaks have been confirmed will also receive shopping vouchers, as was done previously.

Meanwhile, the police are concurrently investigating Coupang’s management in connection with the personal data breach. The police plan to summon Coupang CEO Rogers again on the 6th to question him over allegations of perjury before the National Assembly.

CEO Rogers had previously appeared before the National Assembly to testify regarding the personal data leak, and the police are reported to be examining whether there was any perjury in the course of that testimony. This new summons is seen as a procedure to verify the facts of the related statements and to determine the scope of responsibility.