Coupang Data Breach: 200,000 Taiwan Accounts Compromised in 33 Million Account Exposure

200,000 Taiwanese Accounts Accessed in Coupang Cyber Incident​

Seoul, February 25: US-listed e-commerce giant Coupang said on Wednesday that around 200,000 Taiwanese customer accounts were compromised in a recent data breach that affected approximately 33 million accounts.

The disclosure follows a comprehensive forensic investigation conducted by cybersecurity firms Mandiant and Palo Alto Networks after the breach was detected in November 2025.

According to the company, the unauthorized activity was carried out by a former employee.

Forensic Probe Points to Former Employee​

In its statement, Coupang said the breach was the result of criminal activity by a former employee.

“This was a crime committed by a former employee against Coupang and against our customers. While legal actions are outside our control, we have continuously called for this individual to be prosecuted to the fullest extent of the law,” the company said.

Mandiant determined that the individual’s unauthorized actions included access to approximately 200,000 customer accounts in Taiwan.

No Highly Sensitive Data Accessed, Says Company​

Coupang stated that the forensic investigation found no evidence that highly sensitive data was accessed.

The company said there is no indication that the accessed customer data was seen, shared with, or transferred to any other individual.

“To date, there has been no detection of misuse of customer data attributable to this incident, nor is there any evidence that any Coupang customer data related to this incident exists in those sources,” the company added.

33.6 Million Accounts Exposed in South Korea Unit​

Earlier this month, a joint public-private investigation into a major data breach at Coupang’s South Korean unit confirmed that more than 33.6 million accounts were exposed.

The investigation also found that the delivery section of the company’s website had been viewed approximately 148 million times. Among the exposed information were shared entrance door passwords.

Initial Disclosure Drew Public Criticism​

Coupang had initially claimed, based on its internal investigation, that data from around 3,300 accounts had been leaked.

That statement triggered widespread public criticism. The science ministry earlier described the claim as unilateral and unfounded.

The latest findings significantly expand the scale of the breach, highlighting the broader impact on customer accounts, including those in Taiwan.