Coupang CEO resigns amidst massive data breach exposing 33.7 million South Koreans

Coupang's CEO, Park Dae-jun, has stepped down following a significant data breach that compromised the personal information of 33.7 million individuals, impacting nearly two-thirds of South Korea's population. This event marks a critical juncture for the nation's technology and e-commerce sectors, according to a recent report by The Cyber Express.

The breach, initially disclosed on November 29, exposed customer names, email addresses, full shipping details including apartment access codes, and partial order information. Crucially, payment details, passwords, and banking information were not compromised. Coupang has implemented measures to block abnormal access and enhance internal monitoring, cooperating with multiple government agencies including the Ministry of Science and ICT and the Personal Information Protection Commission. The company has alerted customers to potential phishing and smishing scams utilizing the leaked data and advised them to change apartment access codes if stored in their delivery details. Authorities have identified a former Chinese Coupang employee as a suspect, increasing scrutiny on insider threats.

Park's resignation underscores South Korea's toughening stance on corporate accountability for data security incidents, aligning with its 2025 Comprehensive National Cybersecurity Strategy. This strategy places direct responsibility on CEOs and enhances regulatory powers, with potential fines for Coupang reaching up to 1.2 trillion won (about $817 million USD). The incident has prompted nationwide emergency inspections of ISMS-certified companies and a push for enhanced security measures like multi-factor authentication and AI-driven anomaly detection across the industry, signaling a new era of stringent cybersecurity enforcement.

Source: The Cyber Express