Retail giant Coupang data breach impacts 33.7 million customers

Recorded: Dec. 1, 2025, 7:02 p.m.

Original

News

Featured
Latest

GreyNoise launches free scanner to check if you're part of a botnet

The Cyber Monday 2025 Cybersecurity, IT, VPN, & Antivirus Deals

Microsoft to secure Entra ID sign-ins from script injection attacks

New ShadowV2 botnet malware used AWS outage as a test opportunity

SmartTube YouTube app for Android TV breached to push malicious update

Microsoft says new Outlook can't open some Excel attachments

Retail giant Coupang data breach impacts 33.7 million customers

When Hackers Wear Suits: Protecting Your Team from Insider Cyber Threats

Tutorials

Latest
Popular

How to access the Dark Web using the Tor Browser

How to enable Kernel-mode Hardware-enforced Stack Protection in Windows 11

How to use the Windows Registry Editor

How to backup and restore the Windows Registry

How to start Windows in Safe Mode

How to remove a Trojan, Virus, Worm, or other Malware

How to show hidden files in Windows 7

How to see hidden files in Windows

Virus Removal Guides

Latest
Most Viewed
Ransomware

Remove the Theonlinesearch.com Search Redirect

Remove the Smartwebfinder.com Search Redirect

How to remove the PBlock+ adware browser extension

Remove the Toksearches.xyz Search Redirect

Remove Security Tool and SecurityTool (Uninstall Guide)

How to Remove WinFixer / Virtumonde / Msevents / Trojan.vundo

How to remove Google Redirects or the TDSS, TDL3, or Alureon rootkit using TDSSKiller

How to remove Antivirus 2009 (Uninstall Instructions)

Locky Ransomware Information, Help Guide, and FAQ

CryptoLocker Ransomware Information Guide and FAQ

CryptorBit and HowDecrypt Information Guide and FAQ

CryptoDefense and How_Decrypt Ransomware Information Guide and FAQ

Downloads

Latest
Most Downloaded

Qualys BrowserCheck

STOPDecrypter

AuroraDecrypter

FilesLockerDecrypter

AdwCleaner

ComboFix

RKill

Junkware Removal Tool

Deals

Categories

eLearning

IT Certification Courses

Gear + Gadgets

Security

VPNs

Popular

Best VPNs

How to change IP address

Access the dark web safely

Best VPN for YouTube

Forums
More

Startup Database
Uninstall Database
Glossary
Chat on Discord
Send us a Tip!
Welcome Guide

HomeNewsSecurityRetail giant Coupang data breach impacts 33.7 million customers

Retail giant Coupang data breach impacts 33.7 million customers

By Bill Toulas

December 1, 2025
11:29 AM
0

South Korea's largest retailer, Coupang, has suffered a data breach that exposed the personal information of 33.7 million customers.
The firm has warned on its Korean-language site that the incident occurred on June 24, 2025, but it only discovered it and began the investigation on November 18, 2025.
"On November 18, 2025, Coupang became aware of unauthorized access to personal information related to the accounts of approximately 4,500 customers," reads the public statement.
"As a result of follow-up research, we learned that the information of 33.7 million accounts was exposed."
Although the investigation is still ongoing, customer information confirmed to be exposed includes full names, phone numbers, email addresses, physical addresses, and order information.
Coupang noted that payment information, including credit card data and account information such as passwords, was not exposed.
Coupang is a U.S.-based tech and online retail company that operates in the South Korean market. It employs 95,000 people and has an annual revenue of over $30 billion.
The company has already reported the incident to the applicable authorities in the country, including the National Police Agency, the Personal Information Protection Commission, and the Korea Internet & Security Agency. Impacted individuals will also be informed via email or SMS.
Coupang noted that customers whose information was exposed should remain vigilant for calls, texts, and other communications impersonating the retail giant.
The company did not share any information about the type of attack and who the perpetrators might be, and by publication time, no cybercriminals had assumed responsibility for the attack.
Korean Herald's The Investor reports that the breach was carried out by a former employee, who used unrevoked access tokens to steal sensitive data from Coupang's systems. However, BleepingComputer has not been able to corroborate these details independently.
The Coupang breach is the second massive-scale cybersecurity incident in South Korea this year.
In April, SK Telecom, the country's largest mobile network operator, warned customers that sensitive USIM data had been exposed due to a malware infection impacting its networks.
The company later confirmed that the initial infection began three years ago, in June 2022, affecting a total of 27 million subscribers, which corresponded to its entire customer base.

Break down IAM silos like Bitpanda, KnowBe4, and PathAI
Broken IAM isn't just an IT problem - the impact ripples across your whole business.
This practical guide covers why traditional IAM practices fail to keep up with modern demands, examples of what "good" IAM looks like, and a simple checklist for building a scalable strategy.
Get the guide

Related Articles:
Real-estate finance services giant SitusAMC breach exposes client dataHyundai AutoEver America data breach exposes SSNs, drivers licensesSonicWall says state-sponsored hackers behind September security breachAuction giant Sotheby’s says data breach exposed financial informationF5 says hackers stole undisclosed BIG-IP flaws, source code

Coupang
Customer Data
Data Breach
Retail Store
Security Breach
South Korea

Bill Toulas
Bill Toulas is a tech writer and infosec news reporter with over a decade of experience working on various online publications, covering open-source, Linux, malware, data breach incidents, and hacks.

Previous Article
Next Article

Popular Stories

Leak confirms OpenAI is preparing ads on ChatGPT for public roll out

Microsoft: Windows updates make password login option invisible

Public GitLab repositories exposed more than 17,000 secrets

Sponsor Posts

Hackers love the holidays! Share FREE Security Awareness Training to keep family & friends cyber-safe!

Overdue a password health-check? Audit your Active Directory for free

Review of Passwork: Affordable Enterprise-Grade Password Manager

Upcoming Webinar

Main Sections

News
VPN Buyer Guides
SysAdmin Software Guides
Downloads
Virus Removal Guides
Tutorials
Startup Database
Uninstall Database
Glossary

Community

Forums
Forum Rules
Chat

Useful Resources

Welcome Guide
Sitemap

Company

About BleepingComputer
Contact Us
Send us a Tip!
Advertising
Write for BleepingComputer
Social & Feeds
Changelog

Username

Password

Remember Me

Not a member yet? Register Now

Reporter

Help us understand the problem. What is going on with this comment?

Spam

Abusive or Harmful

Inappropriate content

Strong language

Other

Read our posting guidelinese to learn what content is prohibited.

Submitting...
SUBMIT

**Coupang Data Breach Exposes 33.7 Million Customer Records**

On December 1, 2025, BleepingComputer reported a significant data breach impacting Coupang, South Korea’s largest retail giant. Approximately 33.7 million customer accounts were exposed following an incident discovered on November 18, 2025, after the company had initially become aware of unauthorized access on June 24, 2025. The breach involved access tokens leveraged by a former employee, allowing them to steal sensitive customer information.

The compromised data included full names, phone numbers, email addresses, physical addresses, and order information. Crucially, payment information, including credit card data and account passwords were not affected by the breach. Coupang promptly reported the incident to relevant authorities, including the National Police Agency, the Personal Information Protection Commission, and the Korea Internet & Security Agency, and initiated notifications to impacted customers via email and SMS.

However, the exact nature of the attack remains shrouded in some mystery. While Korean Herald’s The Investor reported the breach was carried out by a former employee utilizing unrevoked access tokens, this information has not been independently verified by BleepingComputer. The investigation is ongoing. This incident represents the second major cybersecurity event in South Korea this year; in April, SK Telecom, the country’s largest mobile network operator, revealed a malware infection impacting its networks, exposing approximately 27 million subscribers dating back to June 2022.

The breach highlights potential vulnerabilities within large retail operations and underscores the importance of robust access control management. The company employs 95,000 people and has an annual revenue of over $30 billion. The exposure serves as a critical reminder for Coupang and the wider retail sector to continually refine its security protocols and proactively identify and mitigate threats. Further, impacted customers are advised to maintain vigilance against potential fraudulent communications.