Find notable cyber news and cases, enriched with sources, timelines, and signals.

Coupang customer data leak exposing 33.7 million records

Data Leak
First reported
Last updated
Happening score
H score 17
2 unique sources, 2 articles

Summary

Hide ▲

Coupang confirmed a data leak that exposed personal information for 33.7 million customers, creating a broad impersonation and phishing risk. The exposed data included names, email addresses, and phone numbers, while payment information and login credentials were not accessed. The exposure traces back to unauthorized access first detected in June 2025 and later updated on Dec. 1, 2025.

Related Happenings

Seoul Metropolitan Police raid on Coupang breach records

Law Enforcement
First: 26.01.2026 15:00 Last: 26.01.2026 15:00 Sources 1

How related: the Seoul Metropolitan Police had identified a suspect and was tracking them

About this happening: **Seoul Metropolitan Police Agency** raided **Coupang’s headquarters in southern Seoul** to search for **internal documents and records related to the breach**, escalating the off...

ShinyHunters Salesforce extortion campaign against global companies in 2025

Campaign
First: 15.01.2026 17:45 Last: 15.01.2026 17:45 Sources 1

About this happening: The **ShinyHunters** campaign now includes a **Qantas** breach disclosed after the airline found a **June 30, 2025** intrusion in a **third-party platform** used by one customer s...

Kyowon Group external data leak affecting customer data

Data Leak
First: 14.01.2026 23:49 Last: 14.01.2026 23:49 Sources 1

About this happening: **Kyowon Group** confirmed an **external data leak** tied to its **January 2026** ransomware incident, creating a real risk that **customer information** was exposed. The company...

Coupang impersonation phishing campaign shows victim surge

Campaign
First: 12.12.2025 20:28 Last: 12.12.2025 20:28 Sources 1

How related: In the meantime, the incident has sparked high-volume phishing activity in the country, affecting roughly two-thirds of its population, and the police have received hundreds of reports of Coupang impersonation since the start of the month.

About this happening: The **Coupang impersonation** phishing wave has escalated across **South Korea**, generating **hundreds of police reports** and reaching roughly **two-thirds of the population**....

Coupang hit by network compromise

Incident
First: 01.12.2025 18:29 Last: 01.12.2025 18:29 Sources 1

How related: A data breach at Coupang that exposed the information of 33.7 million customers has been tied to a former employee who retained access to internal systems after leaving the company.

About this happening: Coupang disclosed a **data breach** that exposed personal information from **33.7 million customer accounts**, creating a major privacy and fraud risk for shoppers. The company sa...

Latest development: 30.12.2025 00:27

Coupang announced $1.17 billion (1.685 trillion Won) in total compensation for 33.7 million customers whose information was exposed in the June 24 breach, with payouts beginning on January 15, 2026 and each customer receiving four single-use purchase vouchers totaling 50,000 won across Coupang products, Coupang Eats, Coupang Travel products, and R.LUX products.

Timeline

  1. 12.12.2025 20:28 1 articles · 5mo ago

    Police tie Coupang leak to former employee

    Attribution Update

    Seoul Metropolitan Police Agency linked the Coupang customer data leak to a 43-year-old Chinese national who had worked at Coupang and was assigned to an authentication management system. Investigators said he left the company in 2024 but retained access to internal systems, and they continued gathering logs, access histories, user credentials, and other records from Coupang offices.

    Show sources
  2. 01.12.2025 17:45 2 articles · 5mo ago

    Coupang customer data leak exposing 33.7 million records

    Initial Disclosure

    In **June 2025**, Coupang detected **unauthorized access** to delivery-related personal information from an **overseas location**. Early estimates suggested about **4,500 accounts** were affected before the scope was later expanded.

    Show sources