South Korea labels Coupang founder de facto controller amid scrutiny

South Korea’s Fair Trade Commission has formally named Coupang founder Bom Kim as the company’s de facto controlling entity, putting the U.S.-listed e-commerce giant under sharper regulatory scrutiny at a moment when its governance and security practices are already under fire.

The designation matters because South Korean competition law treats a “same person” controller as the individual deemed to effectively run a conglomerate. That classification can deepen oversight of related-party transactions, ownership structures and disclosure duties under the Fair Trade Act, and it places more responsibility on the person at the top rather than on a corporate shell. Kim also serves as Coupang’s chief executive officer and chairman, underscoring how much authority remains concentrated around one figure even inside a complex group with logistics, payments and other digital services.

The move comes after Coupang’s 2025 data breach exposed personal information for about 33.7 million to 34 million customers, one of the largest leaks in South Korea. The company said unauthorized access had begun months before it publicly disclosed the breach in late November 2025. Since then, the episode has fueled pressure from consumers, politicians, police and regulators, and the new controller designation gives the government a more personal and formal target for oversight.

South Korean reporting said the commission relied in part on the management role of Kim’s younger brother, Yoo Kim, who was said to have chaired logistics-related meetings and taken part in performance reviews. That finding, the regulator said, meant the conditions for keeping Coupang outside the stricter group-designation regime were no longer met. The FTC’s ruling is expected to bring additional disclosure requirements and closer monitoring of intra-group dealings, especially as Coupang’s business stretches well beyond online retail.

Coupang said it would challenge the designation through administrative litigation, arguing that as a U.S.-listed company it already faces disclosure obligations from the U.S. Securities and Exchange Commission. The company said its ownership structure is transparent, with Coupang Inc. owning 100% of its Korean unit and the subsidiaries held within that chain.

For investors and regulators, the decision signals that scale in South Korea’s digital economy does not excuse blurred accountability. It also fits a wider global push to pin legal responsibility on founders who wield outsized power even when corporate structures are designed to diffuse it on paper. Because Kim is a U.S. citizen, the ruling could also add another layer of friction between Seoul and Washington over how to police cross-border platform companies.