South Korea’s Ministry of Science and ICT (MSIT) on Tuesday released the results of its joint public-private investigation into a major data breach at e-commerce platform Coupang, concluding that tens of millions of user records were exposed over several months due to failures in user authentication and internal security controls. The ministry said a former employee exploited authentication vulnerabilities to access user accounts without normal login procedures, enabling large-scale viewing of personal data including names, email addresses, delivery information and order histories.

MSIT also found that Coupang failed to meet statutory obligations following the breach, including delays in reporting the