Coupang to pay almost $1.2 billion in compensation for data breach

• Coupang breach exposed data of 33.7M customers, one of South Korea’s largest cyberattacks
• Company offers $35 vouchers as compensation, usable only on Coupang services
• Lawmakers and consumer groups criticize settlement as marketing, police launch investigation

In South Korea, people’s personal information is worth roughly the same as a meal in a sit-down restaurant - around $35. Or at least, that's what the latest data breach settlement suggests.

South Korean e-commerce behemoth Coupang announced it would settle with 33.7 million customers whose data it lost in a recent cyberattack. In November 2025, an unnamed threat actor broke into Coupang’s IT infrastructure and exfiltrated people’s names, emails, phone numbers, shipping addresses, and specific order information.

The attack is widely considered as among the biggest ones in the country’s history, triggering law enforcement investigations, and threats of class-action lawsuits.