S Korea's ecommerce rivals step up after Coupang data breach

Ecommerce companies in South Korea are ramping up efforts to win customers after Coupang disclosed a major data breach affecting 33.7 million users.

Coupang holds a 22.7% market share, followed by Naver at 20.7%.

The breach exposed user names, contact information, and delivery histories, prompting some consumers to consider leaving the platform and join class-action lawsuits.

Rivals like Naver and SSG.com are updating membership programs and delivery services to attract users seeking alternatives.

Naver launched Kurly N Mart with Kurly to expand fresh food offerings. SSG.com is expanding early morning delivery and revamping its membership.

Another ecommerce platform, 11st reached 1.2 million subscribers with its free membership.

🔗 Source: The Korea Times

🧠 Food for thought

Implications, context, and why it matters.

Coupang PIPC fine looks manageable

The Personal Information Protection Commission (PIPC) fined Meta $15.67 million for processing sensitive data from about 980,000 users without consent and for sharing it with advertisers 1 2. Temu paid $978,000 for undisclosed overseas data transfers 1 2. Coupang had 33.7 million affected users, yet cases suggest penalties land below $100 million and could be absorbed given its 22.7% share.
Personal Information Protection Act (PIPA) allows administrative surcharges and corrective orders 3. Fines can reach South Korean won (KRW) 30 million for breaching a corrective order 3. Criminal penalties can reach KRW 50 million, with punitive damages up to five times actual losses for intentional or negligent acts 3.
Daily active users sit at 17.8 million, signaling limited churn. Class-action lawsuits are forming. Rivals are tweaking memberships and delivery to court shoppers.

Identity protection can meet demand with Korean support

Korea Credit Bureau (KCB) offers free credit management and processes resident registration numbers for identity checks with SK Telecom, KT, plus LG U-Plus 4 5. The breach scale creates near-term demand for monitoring that these providers could expand.
Cybersecurity outfits and fintech firms can partner with KCB or NICE Information Service to deliver Korean-language identity theft protection, credit monitoring, plus dark web scanning for ecommerce breach victims 5.
PIPC released a Chinese-language version in May 2025 of its April 2024 Guide to the Application of the Personal Information Protection Act for Overseas Businesses 2. This backs localized tools that help users seek data access under PIPA, and the PIPC has ordered firms to respond quickly in enforcement actions 1 3.