Coupang, Inc.

On November 18, 2025, Coupang Corp. discovered that a former employee had gained unauthorized access to approximately 33 million customer accounts, obtaining names, phone numbers, delivery addresses, and email addresses. Limited data from ~3,000 accounts was saved and later deleted; no payment, credential, or government-ID data was compromised. Coupang disabled the access method, notified Korean regulators and customers, and announced ~$1.2B in customer-compensation vouchers. Securities class actions and a derivative lawsuit followed.