South Korea Moves to Toughen Data Protection Laws After Coupang Cyber Breach

South Korea Steps Up Data Protection Measures After Massive Coupang Breach

South Korea is fast-tracking major reforms to strengthen its data protection regime after a large-scale cyberattack on e-commerce giant Coupang compromised the personal details of 33.7 million users . Prime Minister Lee Nak-yon called for significantly tougher penalties on corporations that fail to secure consumer data, emphasising that public trust forms the backbone of the country’s advanced digital economy.

One of the Largest Breaches in South Korea’s Tech Sector

Coupang reported detecting the intrusion on November 18 , though investigations suggest that unauthorised access may have begun as early as June 24, 2025 , using overseas servers. While the leaked information reportedly includes names and contact details, the company maintains that financial and payment data were not exposed. Coupang has issued an apology and advised users to be cautious about phishing and impersonation attempts.

Government Push for Harsher Penalties and Accountability

In an address to lawmakers, the Prime Minister argued that existing laws fail to adequately deter negligence in cybersecurity practices. He urged coordinated action between ministries, regulators and private firms to prevent similar incidents, stressing that stronger enforcement is essential for safeguarding South Korea’s digital infrastructure.

Revisiting the Personal Information Protection Act

Although the Personal Information Protection Act (PIPA) is considered one of the more advanced global privacy frameworks, experts argue that weak implementation has allowed recurring lapses. The scale of the Coupang breach has renewed calls for higher fines, mandatory security audits and strict reporting requirements.

Exam Oriented Facts

• Coupang breach impacted 33.7 million users .

• Unauthorised access suspected from June 24, 2025 .

• South Korea’s privacy regime operates under PIPA .

• The breach surpasses the SK Telecom leak (23.2 million users) .