Coupang users drop to 33.2 million after data breach

Coupang’s monthly active users (MAU) decreased by 3.2 percent in January to 33.2 million, according to industry data from Wiseapp Retail.

This decline follows a large-scale data breach disclosed in late November, which affected about 33.7 million users.

The company offered 50,000-won (US$34.5) discount vouchers to impacted users as compensation.

The January drop was more pronounced than December’s 0.3 percent decrease.

🔗 Source: Yonhap

🧠 Food for thought

Implications, context, and why it matters.

South Korea’s largest personal data leak in more than a decade exposed personal information plus some order details tied to 33.7 million accounts 1.
Reports put the intrusion at nearly five months, from late June to mid-November 2025, after an attacker exploited weaknesses in account authentication and/or mismanaged cryptographic keys (digital “locks” used to protect data) linked to a former employee 1, 2.
Coupang faced backlash after first describing suspicious activity tied to about 4,500 accounts, then acknowledging exposure of 33.7 million accounts about 10 days later. Founder Kim Bom said he failed to communicate clearly early on and called his delayed public apology “a poor judgment” 1, 3.
The breach followed at least three smaller personal-information exposure incidents since 2020. South Korean regulators have opened investigations that could lead to record-setting fines 4.

Coupang announced 1.69 trillion won (about $1.17 billion) in vouchers. Regulators said penalties under the Personal Information Protection Act can reach up to 3% of revenue tied to the compromised data, which Korea Times estimated could approach 1 trillion won (about $770 million) 3, 4.
The South Korean government expanded a pan-government task force on platform data protection and raised its leadership to the deputy prime minister level, pointing to possible institutional reforms for platform companies 5.
Presidential staff criticized the country’s “virtually ineffective” punitive damages system, raising the odds of legal or regulatory changes 4.
Regulatory scrutiny also turned into a geopolitical flashpoint. Former U.S. National Security Adviser Robert C. O’Brien warned about possible discriminatory measures against the NYSE-listed firm (a company whose shares trade on the New York Stock Exchange), though this framing is contested in Korea 5.