Coupang Hit With Record $409M Fine: One Unrevoked Key Exposed Two-Thirds of South Korea

▤ Summary

South Korea’s privacy regulator hit Coupang with a record 624.7 billion won fine after finding that an unrevoked authentication key let a former contractor access customer data for months. The investigation also cited delayed breach notification, deleted logs, and improper collection of user behavior data across third-party services. Coupang said it will challenge the ruling in court, while investors and regulators continue to dispute the scope and impact of the breach. The case now serves as a major warning about contractor offboarding, key revocation, and identity security controls at scale.

▦ Linked Companies