In the course of an investigation into Coupang's large-scale personal data leak in Nov. last year, it was confirmed that the personal information of about 165,000 accounts was additionally leaked.
On Feb. 5, Coupang notified customers subject to the additional data leak by text message. Coupang said, "We immediately blocked the abnormal access route related to the personal data leak that occurred in Nov. 2025 and completed the response," and added, "In the same personal data leak incident that occurred in November, an additional leak involving about 165,000 accounts was confirmed."
Coupang notified customers of the additional leak in line with a recommendation from the Personal Information Protection Commission. The leaked information is address book data entered by customers (name, phone number, address). Coupang said that payment and login-related information, as well as email, order history, and shared entrance codes, were not leaked. Coupang plans to compensate affected customers with a purchase voucher worth 50,000 won per person. In its notice, Coupang stressed that customers should never click links of unclear origin and should delete and report related text messages.
It is still uncertain whether the number of people affected by the data leak will expand from the existing 33.7 million to 33.865 million. According to the industry, the government and Coupang are also identifying the number of invalid accounts among the previously announced 33.7 million. Invalid accounts are those without any personal information such as name, phone number, or address, or accounts whose member information cannot be identified.