A data breach in the U.S. usually ends with an apology email. Maybe a free year of credit checks too.
Coupang got a bigger bill. South Korea fined it about $409 million.
That is the largest privacy penalty the country has ever set.
Coupang is a giant online store. People call it the "Amazon of Asia."
It is based in the U.S. but huge in South Korea. So a Korean fine still stings.
A former worker pulled the private data of more than 34 million customers. It went on for months.
The haul was broad. Names, emails, home addresses, phone numbers, and order histories all leaked.
The data was not just names. It mapped where millions of people live and what they buy.
Put plainly, that is about two of every three people in the country. No one caught it until December 2025.
For shoppers, the risk is real. Leaked emails and phone numbers are fuel for scams and fraud.
The breach also stayed hidden for months. That gave the data plenty of time to spread.
Korea takes privacy seriously. Its rules carry real teeth, unlike many U.S. laws.
We turn stories like this into what they mean for your portfolio over at Market Briefs - a five-minute read each morning, plus a free investing masterclass when you sign up.
U.S. firms rarely pay much for a data breach. The laws at home are weak, so big fines almost never land.
Go overseas, though, and the math flips. It is like a speeding ticket that costs $50 in one state and $5,000 in the next.
The fine comes in two parts. About 423.6 billion won is for leaking data, and 201.1 billion won is for collecting data without consent.
It set a record by a mile. The old high was 134.8 billion won, paid by SK Telecom last year.
A Coupang unit got hit too. Its logistics arm paid 248 million won for misusing worker data.
Coupang trades as a public company in New York. So this record fine lands right on its books.
The firm plans to fight back. It told the BBC it will challenge the decision.
There is a political layer too. Some Korean lawmakers say U.S. officials leaned on them, tying the case to relations between the two countries.
The watchdog was blunt. It blamed weak safety controls, not a clever hack.
Investors mostly shrugged it off. Coupang shares actually rose after the news.
Why the calm? The fine is big, but Coupang can carry it.
It books tens of billions in sales a year. One penalty will not sink the business.
The case may not end here. Coupang could spend years fighting it in court.
For any U.S. firm with millions of users abroad, this is a preview. The bill depends on which country's regulator picks up the phone.
Coupang's home turf would have shrugged. Seoul sent the maximum.
Get this kind of breakdown every weekday morning. Join the Market Briefs newsletter and a 45-minute investing course comes with it.
