Coupang Says Data Leak Perpetrator Did Not Transfer Data to Others

Core Insights - The data breach at Coupang involved access to 33 million accounts, but only 3,000 accounts had data retained by the perpetrator, who later deleted it after media reports surfaced [1][4][6] Group 1: Data Breach Details - The perpetrator, a former employee, accessed basic user data using a stolen internal security key, retaining order history and building entrance codes for approximately 3,000 accounts [3][4] - The accessed basic data included names, emails, addresses, and phone numbers, but did not include payment data, login data, or individual customs numbers [5][6] - The investigation revealed that the perpetrator did not transmit the data to third parties and deleted the stored data upon seeing news reports about the incident [1][4] Group 2: Company Response and Legal Implications - Coupang reported the data breach to authorities on November 18 and disclosed the incident publicly on November 29, affecting nearly 33.7 million customers in South Korea [6][7] - The company is cooperating with an ongoing investigation involving the South Korean government and cybersecurity firms, and plans to announce compensation plans for affected customers [6][7] - Following the breach, Coupang faces a class action lawsuit in California, alleging violations of securities laws and misleading investors regarding data security practices [7]