Coupang Files Lawsuit Against Privacy Commission Fines

Coupang is challenging the 624.9 billion won in fines and penalties imposed by the commission in June 2026. The company filed administrative lawsuits to contest the findings related to a large-scale data breach and the alleged unauthorized collection of user activity data.

According to the Personal Information Protection Commission, the breach affected at least 37.56 million individuals. This figure includes 33.22 million registered members and at least 4.33 million non-members, representing a higher number than previously estimated by a government-private joint investigation team earlier in the year.

The commission issued a total of 624.9 billion won in fines and 16.8 million won in administrative penalties. This included 423.5 billion won for the data breach, 201.1 billion won for unauthorized collection of activity records, and 248 million won for violations by Coupang Fulfillment Services.

Coupang has publicly acknowledged the incident, stating that it feels a heavy sense of responsibility for the concern caused to customers and the public. The company has committed to strengthening its privacy protection framework and working toward restoring customer trust.

As of October 8, 2026, Coupang has filed two administrative lawsuits and requested a stay of execution for the fines. The cases are currently pending before the Seoul Administrative Court. Details regarding future court dates or potential settlements were not available at the time of writing.

Yes, the Personal Information Protection Commission has signaled a shift toward a 'prevention-centered' paradigm. Officials are emphasizing that companies must prioritize basic security patches and internal management to prevent breaches, rather than focusing solely on post-incident responses or complex external hacking threats.