Coupang Data Breach Exposed Personal Data of 33.7 Million Customers Personal Records

Coupang confirmed a massive data breach impacting roughly 33.7 million customers after a former employee used unrevoked cryptographic signing keys to generate access tokens and remotely access customer records (names, contact details, shipping addresses, and order histories); payment data and passwords were not compromised. The breach went undetected for months, underscores critical identity and access management failures, raises phishing and privacy risks, and may result in substantial regulatory penalties under South Korea's Personal Information Protection Act.