INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Lee Jae-hoon Fined Over Coupang Data Breach Incident and Leaks

| 2026-10-14 11:08 HIGH LOW DATA BREACH
JSON
Executive Summary
AI-generated
A large-scale data breach occurred on October 14, 2026, involving Coupang and affecting approximately 33.22 million members and 4.33 million non-members, with leaked personal information including names, email addresses, delivery addresses, phone numbers, and order records. The incident was caused by a former employee securing a replacement digital certificate key and generating forged digital certificates to access personal information due to the lack of basic security management systems at Coupang. The company failed to properly manage access rights to digital certificate keys and did not immediately update or delete the key after the employee's departure, leading to rapid abnormal access to pages containing personal information that was not detected or blocked in time. As a result, the Personal Information Protection Commission imposed fines of 624 billion won and surcharges totaling 16.8 million won on Coupang, with the court re-evaluating the regulatory agency's confirmation of safety measures as a mandatory obligation and the appropriateness of administrative reprimands due to this incident.
Technical Mitigations AI-generated
• Implement a secure key management system to prevent unauthorized access and ensure timely updates or deletion of digital certificate keys after employee departure. • Regularly monitor abnormal access to pages containing personal information and block such activity in real-time. • Conduct thorough investigations into suspected security breaches, including the use of forensic analysis techniques to detect forged digital certificates.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope
Incident Timeline
‎2026/10/14
The Personal Information Protection Commission confirmed that Coupang leaked the personal information of approximately 33,220,000 members and 4,330,000 non-members.
organisation The Democratic Party of Korea
The Democratic Party of Korea announced that its member, Hoon-ki Lee, will hold a press conference at 9:20 am on 14th of this month to discuss 'Coupang Personal Information Leaks and Fines Dismissal Press Conference'.
organisation Coupang Personal Information Leaks
The Democratic Party of Korea announced that its member, Hoon-ki Lee, will hold a press conference at 9:20 am on 14th of this month to discuss 'Coupang Personal Information Leaks and Fines Dismissal Press Conference'.
organisation The Personal Information Protection Commission
The Personal Information Protection Commission confirmed in its 6th of this month meeting that Coupang had violated the Personal Information Protection Act by leaking personal information and unauthorized collection of online records from other companies.
According to the investigation by the Personal Information Protection Commission, Coupang leaked the personal information of approximately 33,220,000 members and 4,330,000 non-members.
organisation the Personal Information Protection Act
The Personal Information Protection Commission confirmed in its 6th of this month meeting that Coupang had violated the Personal Information Protection Act by leaking personal information and unauthorized collection of online records from other companies.
data_breach 33,220,000 members
According to the investigation by the Personal Information Protection Commission, Coupang leaked the personal information of approximately 33,220,000 members and 4,330,000 non-members.
organisation PIPC
The Personal Information Protection Commission (PIPC) confirmed that the delay in notification of data breaches, partial data breaches, and the infringement of the independent work of Personal Information Protection Officers (CPOs) were also identified.
organisation Personal Information Protection
The Personal Information Protection Commission (PIPC) confirmed that the delay in notification of data breaches, partial data breaches, and the infringement of the independent work of Personal Information Protection Officers (CPOs) were also identified.
organisation The Korea Privacy Commission
The Korea Privacy Commission (KPC) has required Coupang to strengthen personal information safety measures, prevent future incidents, and notify the public about the facts of the disclosure.
organisation KPC
The Korea Privacy Commission (KPC) has required Coupang to strengthen personal information safety measures, prevent future incidents, and notify the public about the facts of the disclosure.
Tactical Metrics
Metrics
data_breach
33,220,000
Members
According to the investigation by the Personal Information Protection Commission, Coupang leaked the personal information of approximately 33,220,000 members and 4,330,000 non-members.
Intelligence Sources
Dailysecu 2026-10-14