South Korean regulators imposed a record 624.7 billion won ($409 million) fine on Coupang for a 2025 data leak that exposed approximately 33.7 million user accounts. The breach triggered diplomatic tensions between Seoul and Washington.
South Korea's Personal Information Protection Commission delivered the penalty to Coupang, the country's largest e-commerce platform and a US-listed company, for a cybersecurity incident that compromised data on a scale affecting roughly two-thirds of South Korea's population.
The fine represents the largest penalty issued by South Korean regulators for a data protection violation. It reflects the severity of the breach and the platform's failure to implement adequate security measures to protect customer information.
Coupang, known for its fast delivery logistics network and subscription services, discovered the intrusion in 2025. The incident exposed sensitive personal data including names, phone numbers, email addresses, and payment information belonging to millions of users across South Korea.
The breach escalated beyond a corporate data security issue into a diplomatic matter between South Korea and the United States. The US government raised concerns about the incident's handling and data protection standards, particularly given Coupang's status as a major technology company and its role in the South Korean economy.
The regulatory action underscores growing pressure on tech companies to strengthen cybersecurity infrastructure and comply with data protection regulations. South Korea has implemented increasingly stringent penalties for companies that fail to safeguard personal information, signaling stricter enforcement of privacy laws.
Coupang has not publicly disclosed detailed remediation efforts beyond the regulatory settlement. The company operates in a competitive landscape where customer trust and data security are critical competitive factors.
The incident marks a significant moment for Asian tech regulation, demonstrating that even major regional platforms face substantial consequences for security lapses. It also highlights the intersection of corporate accountability, national security concerns, and international relations in the digital economy.
The FCC has granted a software and firmware update grace period for banned drones and routers in the United States through January 2029. The decision allows users to maintain security patches and critical updates despite hardware restrictions.
The US government has prohibited the use of differential privacy techniques in Census data collection and reporting. The decision removes a privacy-protection method that adds statistical noise to prevent individual identification.
A pro-Iran media outlet has released over a dozen AI-generated Lego cartoon videos targeting President Trump and the United States. The group, Explosive Media, is leveraging artificial intelligence to create satirical content.