Coupang Breach Affected 33.7 Million Customer Accounts

The South Korean e-commerce platform Coupang reported a data breach compromising 33.7 million customer accounts, exposing names, email addresses, telephone numbers, shipping addresses and certain order histories.

South Korea’s population is around 52 million. A single platform’s affected account count reaching 33.7 million is not a large breach at a large company — it is most of a country.

The corpus filed the same structure at 25-0501, where all 6.5 million Co-op members were taken, and at 25-0909, where two of four French carriers disclosed within a month. Where a market has one dominant platform, the distinction between a company’s customer list and a national register largely disappears.

Names and addresses are the fields that trigger notification. Order history is the field that describes a person: what they buy, how often, for whom, and what changed when.

On a platform that sells groceries, medicines, baby products and household goods, a purchase record is a household inventory over time. This desk made the same argument about a luxury customer list at 25-0603 and about utility consumption at 26-0326 — the sensitivity is in the inference, and no data-protection assessment has a column for it.

The corpus documented at 25-0502 that incidents outside a handful of jurisdictions rarely produce affected counts. South Korea has a mandatory disclosure regime and an active regulator, which is why this file has a figure at all.

That is the argument at 25-1221 in a single case: the countries that appear worst in breach statistics are frequently the ones that measure.