Seoul: A massive data breach attack against e-commerce giant Coupang Inc. has compromised the data of over 30 million customers, with reports indicating that the breach lasted from June to November and involved the exploitation of the company's electronic signature key.
According to Yonhap News Agency, officials confirmed the breach during a parliamentary session, with Second Vice Science Minister Ryu Je-myung revealing that private data from more than 30 million accounts was leaked. The breach was reportedly carried out from June 24 to November 8, utilizing Coupang's electronic signature key, a critical component required to access the company's servers.
Minister Ryu emphasized the necessity of a police investigation to identify the suspect, following reports of a purported former Coupang employee claiming to have stolen more than 30 million pieces of personal information. Coupang's CEO, Park Dae-jun, stated that the suspect, who had worked as a developer on the company's verification system development team, could be acting alone or possibly with others. However, further details remain undisclosed due to an ongoing investigation.
Last week, Coupang, which is listed in the U.S., reported that personal information of 33.7 million customers had been compromised. The breach affected nearly all Coupang members, exposing sensitive information such as names, phone numbers, email addresses, and delivery details.
Coupang, known for its overnight delivery service of fresh food and daily necessities, is one of South Korea's most popular shopping platforms, boasting 34 million monthly active users as of November, marking a slight increase from the previous month.
The incident has sparked public concern over South Korea's data protection capabilities, following several major data leak cases this year involving companies like SK Telecom Co., KT Corp., and Lotte Card Co. During the parliamentary session, Science Minister Bae Kyung-hoon underscored the urgency of implementing a punitive damages system for data leaks. This legal framework would require additional compensation beyond actual damages to deter future offenses and protect the public.
Minister Bae affirmed that a joint investigation team comprising government and private sector members would conduct a thorough investigation and implement necessary measures. The government plans to develop a comprehensive plan, including the punitive damages system, by the end of the year.