Incident record
쿠팡
Coupang · E-commerce
This record separates what has been publicly claimed, investigated, and confirmed. It does not imply that every affected account belongs to a unique person.
Reported impact
37.5M people
Disclosure recorded
2025-12-01
Sector
E-commerce
Practical risk
Critical
What this means
A practical reading of this record
The public record supports a critical practical risk level based on the currently reported scope and data categories. This can change if the organisation or regulator updates the record.
- Change the password for this service through its official app or website. Change it anywhere you reused it.
- Expect targeted phishing and account-recovery scams. Do not share verification codes with an unsolicited caller.
Classification
Categories are assigned only where the currently stored public record supports them. A privacy decision is not automatically treated as a hacking incident.
Evidence status
Why it appears in the index
Confirmed by the organisation, a regulator, or a documented official decision.
The record is based on a published PIPC decision.
Recorded source · PIPC decision
Direct source links are being standardised in the source archive. Until then, this page names the current evidence basis rather than substituting a generic link.
Editorial record
Review and status trail
Last reviewed
2026-09-21
The latest editorial review of the stored public record.
Latest source event
2026-06-10
The most recent dated event currently documented on this page.
Confirmed
Current status recorded from the first documented public event in this entry.
Documented events
Public timeline
- 01
Incident added to the index
A large-scale incident affecting Coupang users was publicly reported.
- 02
Regulator decision
PIPC published a decision concerning the incident and personal-data handling.
Data reported exposed
Protect your account
Change your password if you use this service
Use a new, unique password through the official app or website. Change any other account where you reused it, and enable a passkey or two-factor authentication when available.
Correction
Is something inaccurate or outdated?
Send a public source or official correction. Material updates are logged rather than silently replacing the record.