FEDERALItem 1.05 · mandatoryHackingRetail & ConsumerTechnologyRetailGeneral MerchandiseCustomer Data InvolvedCriticalActive
Coupang, Inc.
bd_8589743521e54e20 · schema v1 · pii pii-v1
Full breach record for Coupang, Inc. →Coupang, Inc. filed Form 8-K/A (Amendment No. 1) updating disclosure of a cybersecurity incident at its wholly-owned Korean subsidiary, Coupang Corp. Approximately 33 million accounts were accessed; the perpetrator saved limited data from approximately 3,000 customer accounts, which has been deleted and not shared with a third party. The perpetrator has been identified and is cooperating. Coupang announced a ~1.685 trillion KRW (~$1.2 billion) customer voucher compensation program starting January 15, 2026.
SEC clockMateriality determined Dec 16, 2025 → Filed Dec 29, 202513d ✗ SEC 4-day late
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_64f7ce544edaa984SEC 8-Kfiled 2025-12-16(13d gap)Verified by operator
- bd_a02211a345ae1793SEC 10-K Item 1Cfiled 2026-02-26(59d gap)Verified by operator
Source provenance
- Source URL
- https://www.sec.gov/Archives/edgar/data/1834584/000183458425000202/cpng-20251215.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Dec 29, 2025
- Raw hash
- 7c3183a5fbbbe36b81e6338f78a20157a7025796ce2c2f01127d067fa399e694
Source filing
AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.
Reporting entity
- Name
- Coupang, Inc.norm: coupang
- SEC CIK
- 0001834584
- Domain
- coupang.com
Victim entity
- Name
- Coupang, Inc.norm: coupang
- Domain
- coupang.com
- Industry
- Retail & ConsumerllmTechnologyllmNAICS 455219 · All Other General Merchandise Retailers
Incident
- Discovered
- —
- Materiality determined
- Dec 16, 2025
- Notification sent
- Nov 30, 2025
- Affected individuals
- 33,000,000
- Data types
- —
- Attack vector
- Unknown
- Threat actor
- External
- Regulator citations
- Filed Form 8-K/A with the U.S. Securities and Exchange Commission
Compliance
- Compliance flags
- SEC 4-day late · 13d
- Discovery-date grounding
- no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
- Clock breakdown
Statute Window Elapsed Threshold Status SEC Materiality determined: Dec 16, 2025→ Filed: Dec 29, 202513d cal. 4 business days SEC 4-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.