South Korea hits Coupang with record $409 million fine over data breach

South Korea’s data protection regulator, the PIPC, has levied a record $409 million fine against Coupang, the country’s largest online retailer, following a significant data breach impacting tens of millions of customers. The breach stemmed from a former employee exploiting a vulnerability in Coupang’s authentication system to steal customer data, including names, addresses, and order histories. Additionally, the regulator penalized Coupang for covertly collecting browsing data from users through its affiliate marketing program, highlighting deficiencies in data protection practices and a failure to notify affected individuals.