Coupang swings to loss after data breach costs

US-listed South Korean ecommerce company Coupang swung from a US$114 million profit to a US$266 million net loss.

It also posted a US$242 million operating loss as costs tied to a customer data breach offset 8% sales growth to US$8.5 billion.

The fallout hit its main Korea business, after a breach disclosed in November 2025 affected about 33.6 million customers.

Results were hurt by one-time customer vouchers and weaker demand after the incident, said founder Bom Kim.

Product commerce revenue rose 4% to US$7.2 billion.

Developing offerings including Taiwan and Coupang Eats rose 28% to US$1.3 billion.

🧠 Food for thought

Implications, context, and why it matters.

A 1.7 trillion won (US$1.17 billion) compensation plan drove the loss. Coupang offered 50,000 won (US$34) in vouchers to each of the 33.6 million affected users 1.
Consumer groups criticized the plan as a sales push. The vouchers were split across Coupang services, and former customers had to sign up again to claim them 2.
Investigators traced the breach to a former employee. They did not trace it to an external attack. The employee allegedly used a stolen, long-validity authentication key. It is a digital credential used to access company systems. Access lasted more than five months 3.

Despite the loss and backlash, monthly active users, a count of how many people use the platform in a month, rose above pre-breach levels within four months. They reached 35.03 million 4.
Coupang’s “dawn delivery” service, its early-morning delivery offering in South Korea, appears woven into daily routines. That helped limit customer departures after the breach 4.
The case still drew heavy regulatory scrutiny. Fines could reach 3% of annual revenue, and the fallout could reshape South Korea’s data protection laws 5.