US investors sue S Korean gov't over Coupang data breach

US investors are pursuing arbitration against South Korea over its handling of a Coupang data breach, according to a legal notice filed on January 23, 2026.

The investors, including Greenoaks and Altimeter, allege the South Korean government’s investigation was discriminatory and unlawfully targeted the US-headquartered ecommerce company, which operates in South Korea, Taiwan, and Japan.

The breach, disclosed in December, involved the leak of personal data from nearly 34 million Korean customers, including names, emails, and addresses.

Coupang’s investors dispute the government’s figure and say only about 3,000 accounts were affected.

South Korea’s Personal Information Protection Commission said over 30 million accounts were exposed.

The investors argue the government’s actions violate the US-Korea Free Trade Agreement and may seek damages if the dispute is not resolved.

🔗 Source: TechCrunch

🧠 Food for thought

Implications, context, and why it matters.

The dispute hinges on what counts as a data leak and claims of unequal treatment

The user totals differ because each side uses a different meaning of a “leak.”
Coupang’s investors say a former employee opened personal data tied to more than 33 million customer accounts, yet kept details from about 3,000 accounts before deleting the rest 1.
South Korean law treats data as leaked once it leaves a company’s control, even if it was not saved long term. That standard supports counting the accessed records in the tens of millions as a “leak” 2.
The same investors argue regulators punished Coupang more harshly than local firms. They cite KakaoPay, which reportedly sent 54 billion customer records to Alipay Singapore and received about a $10 million fine plus a CEO warning, and SK Telecom, which they say paid a $91 million fine after a SIM-card-related breach 1.

The case is escalating into a geopolitical test of US-Korea trade relations

The issue now sits beyond routine enforcement and has become a “geopolitical flashpoint” 1.
The U.S. House Judiciary Committee opened an inquiry into claims that South Korea singles out American technology companies, and issued a subpoena to Coupang, Inc., per the Information Technology and Innovation Foundation (ITIF), a Washington-based tech policy think tank 3.
Analysts describe a wider pattern of “non-tariff attacks,” where regulators use rules to punish foreign firms. They estimate U.S. tech companies have faced more than $30 billion in related fines worldwide over the past decade 3.
Coupang, Inc. has spent $10,755,000 on lobbying since its 2021 listing, based on U.S. Senate lobbying reports cited by Kyunghyang Shinmun, a South Korean newspaper 4.