South Korea fines Coupang $409M over major data breach
South Korea's Personal Information Protection Commission has fined Coupang a record 624.7 billion won (~$409M) for a customer data breach affecting roughly 33-37.55 million users, attributed to inadequate safety management and a former employee exploiting a stolen authentication key. Separate additional PIPC penalties of ~6 billion won and ~248 million won for non-consensual data collection via an affiliate marketing programme bring disclosed PIPC exposure above $540M. Coverage flags follow-on Korean and US class action exposure, regulatory defence costs, D&O exposure for Coupang leadership and broader Korean digital platform cyber enforcement, while insurance recovery, appeal status and total loss quantum remain undisclosed.
AI-generated from linked source reports. See our correction policy.
Impact verdict
Medium impact. MEDIUM: A confirmed regulatory penalty of ~$409M against a named major e-commerce platform plus an additional ~$132M in related PIPC penalties is a material cyber liability, regulatory defence and D&O exposure event for underwriters covering Korean e-commerce and tech accounts, with potential Korean-severe fines plus class action severity supporting a medium cyber severity band given typical KR/APAC tower sizing. Severity is bounded medium because (a) this is a regulatory fine on a single named insured plus disclosed related penalties, not a systemic market loss; (b) the number of affected individuals, insurance recovery position, regulatory fine insurability under Korean cyber/D&O wordings, and class action quantum remain unconfirmed; and (c) coverage does not disclose coverage triggers or whether regulatory penalties are insurable in the relevant wordings. The fine establishes a significant precedent for Korean privacy enforcement that may flow through to rate, attachment, coverage dialogue and aggregation monitoring for large Korean and APAC-exposed e-commerce/tech platforms.
View assessment methodologyPremium discovery tier
Unlock analyst briefs, intelligence depth, and the revision timeline
Public pages show event facts and a short lead-in. Premium accounts unlock analyst briefs, deeper intelligence, loss context, and the full revision history for this event.
Start two-week trialAffected countries
Lloyd's classifications
Tracking this kind of risk? Get an email when Cyber events escalate.
Get alerts