Coupang swings to loss as data breach weighs on Q4 results

Coupang reported a quarterly loss and revenue below analysts’ estimates, with results hurt by the fallout from a data breach in South Korea, company executives said.

Revenue for Q4 was US$8.8 billion, below the US$8.9 billion forecast from LSEG, and the company swung to a US$26 million loss from a profit a year earlier.

Active customers in Coupang’s product commerce segment rose 8% year-on-year to 24.6 million in Q4 but fell from 24.7 million the prior quarter, a dip the company said appeared related to the breach.

CFO Gaurav Anand said there are signs of stabilization since the end of Q4, with many customers reactivating accounts.

🔗 Source: Reuters

🧠 Food for thought

Implications, context, and why it matters.

The data breach came from poor controls, not a complex hack

A South Korean government probe said the breach stemmed from management failures, including “lax oversight of authentication systems” 1.
Investigators said Coupang did not promptly invalidate an internal “signing key” tied to a former engineer after departure 1. A signing key is a secret digital credential used to create trusted authentication “tokens” that systems accept as proof a user is allowed in. The former employee allegedly used it to mint fake login tokens and enter systems without permission 1.
Unauthorized access continued for months, starting in April 2025 and running until discovery in November 2025 1.
The ministry also accused Coupang of trying to “restrict” the investigation by deleting some data 1. Officials said the company disclosed the breach more than 53 hours after an internal report, which missed the 24-hour legal reporting window 1.

Coupang’s crisis created room for rivals

Coupang rolled out customer compensation that offers about $1.2 billion in shopping vouchers 2.
User activity shifted after the incident 3. Coupang’s mobile monthly active users dropped 3.5% from November to January, while Naver saw a 23% rise. Naver is South Korea’s dominant internet company, best known for its search engine and e-commerce services 3.
Growth also slowed 4. Coupang said Product Commerce expanded 16% in constant currency in the three months before the incident, while management estimated about 4% growth in January after adjusting for Lunar New Year timing 4.
Other scrutiny added pressure, including a 2.2 billion won (about $1.55 million) fine from South Korea’s antitrust regulator over supplier-related practices such as pressuring suppliers and delaying payments 3.