South Korea Fines Coupang $400M Over Data Breach Affecting Millions

South Korea’s Personal Information Protection Commission fined Coupang a record 423.6 billion won (plus 201 billion won for non‑consensual data collection) after a massive data breach that exposed names, contact and delivery details, and order histories for roughly 34–37.5 million users. The regulator attributed the incident to poor management of authentication signing keys and access controls; the breach likely began in June via a foreign‑hosted server, prompted a months‑long investigation, leadership changes, and highlights large operational, regulatory, and fraud risks for affected customers and organizations handling consumer data.