Police have launched a full-scale investigation into the incident in which 33.7 million Coupang customer accounts were exposed externally without authorization.
The Seoul Metropolitan Police Agency's cyber investigation unit said on the 29th, "On the 25th, we received a complaint from Coupang regarding a personal information leak and began an investigation." The complaint is said to specify a charge of intrusion under the Act on Promotion of Information and Communications Network Utilization and Information Protection.
The complaint filed by Coupang reportedly did not identify the suspect, listing the person as "name unknown."
A police official emphasized, "Given the seriousness of the matter, we plan to investigate swiftly and strictly."
Coupang first confirmed on the 18th during an internal check that information from about 4,500 accounts had been accessed without authorization. A subsequent internal investigation found the scope of exposure had expanded to about 33.7 million accounts.
The company explained that names, emails, shipping address books, and some order information were exposed, and said, "Sensitive information such as payment information or login information was not leaked."