Coupang founder apologises, pledges compensation after major customer data leak

Coupang founder and chairman Kim Bom issued a written apology on the company website on December 28, acknowledging a recent customer data leak and pledging to unveil compensation for those affected. The statement, posted in Korean, said Kim "sincerely apologises" and promised to disclose a compensation plan "as soon as possible." It is his first public comment since the breach was disclosed in November.

The company says it has restored the leaked personal information and confirmed that data from 3,000 of its roughly 33 million customers were copied by a suspect onto a personal computer. Coupang has asserted those saved records were not sold or otherwise transferred to third parties. The breach has touched off widespread alarm in South Korea given the size of the company and the sensitivity of exposed information.

Authorities and the company are cooperating in an ongoing investigation. Government investigators have analyzed the suspect's laptop as part of the probe and have been examining how the data were accessed and handled. The South Korean government has filed a complaint against Coupang over the company’s unilateral disclosure that the suspect was a former employee, a move that officials say raised procedural concerns in the investigation.

Political pressure has mounted on Kim and the company in recent weeks. Lawmakers criticized Kim for not appearing at parliamentary hearings in Seoul, where questions over responsibility and oversight have dominated proceedings. A National Assembly hearing on December 2 featured testimony from former Coupang chief executive Park Dae jun, who answered questions about the company’s handling of the breach and its internal controls. Some lawmakers have indicated they will pursue legal action, arguing that the New York listed online retailer derives the bulk of its revenue from South Korea and should be accountable to domestic oversight.

Public protests have further amplified scrutiny. Demonstrators gathered at Gwanghwamun Square in central Seoul on December 26 demanding an apology from Kim and a thorough government investigation into the leak. The demonstrations reflected broader concern among consumers about data security and corporate responsibility at one of South Korea’s most prominent technology firms.

Coupang, which is listed on the New York stock exchange, said it is working closely with government investigators and has taken steps to restore affected information. The company has not released detailed information on the precise nature of the leaked data, how the breach occurred, whether additional suspects are involved, or whether criminal charges have been filed against the suspect. Kim’s statement offered no specific timetable or details about the scale or mechanics of the promised compensation.

The incident underscores the growing challenge of protecting personal data at large online platforms and the political fallout when breaches reach national scale. With investigators continuing their work and lawmakers pressing for answers, Coupang faces a critical test in rebuilding trust among customers and regulators while clarifying what compensation and safeguards it will provide.