A major data breach at South Korea’s largest retailer, Coupang, exposed personal information of 33.7 million customers, including names and addresses, but not payment details. The breach is suspected to be caused by a former employee using unrevoked access tokens, raising concerns over insider threats. #Coupang #DataBreach #InsiderThreat
Keypoints
- Coupang’s data breach affected 33.7 million customer accounts with personal information exposed.
- The company discovered the breach on November 18, 2025, but the incident occurred on June 24, 2025.
- Customer payment data and passwords remain secure and were not exposed in the breach.
- The breach is believed to involve a former employee leveraging unrevoked access tokens.
- This incident marks the second major cybersecurity breach in South Korea this year, following SK Telecom’s data leak.