South Korea's Data Watchdog Warns Coupang: Take Down Leak Probe Now

South Korea's data protection regulator is putting serious pressure on Coupang. They've told the e-commerce giant to take down the results of its own internal investigation into a massive data leak. Officials argue the company's findings are unverified and could mislead the public while their official probe is still ongoing. Making matters worse, the antitrust watchdog is now floating the possibility of a temporary business suspension if Coupang doesn't comply.

Key Points: South Korea Regulator Orders Coupang to Remove Unverified Data Leak Report

  • Regulator says Coupang's internal probe could confuse the public before official verification
  • Coupang reported a breach affecting 33.7 million users' personal data in November
  • Watchdog accuses Coupang of being uncooperative and delaying document submissions
  • Antitrust chief warns a temporary business suspension for Coupang is possible
2 min read

Regulator urges Coupang to take down independent data leak probe results from website

South Korea's data watchdog urges Coupang to remove its internal data leak probe results, calling them unverified and a potential obstruction of the official investigation.

"If an order is not implemented or if it is deemed insufficient to provide relief to affected consumers, a business suspension is also possible. - Ju Byung-gi, FTC Chairman"

Seoul, Jan 14

South Korea's data protection watchdog on Wednesday urged online retailer Coupang to take down its independent probe results into a massive data leak from its mobile application and website, describing them as unverified information.

The Personal Information Protection Commission took issue with the company's notice that claims a former employee breached the personal information of 33 million users but saved data from only about 3,000 accounts, which Coupang claimed was later deleted.

Coupang is currently under investigation by authorities over the data breach, which the company earlier reported in November as having impacted the personal data of 33.7 million customers, such as their names, phone numbers and delivery addresses.

The regulator said the company's internal probe results could lead to confusion among the public as it has yet to be verified by an official investigation, noting the notice could be considered as interfering in its investigation into the company.

It noted Coupang has been uncooperative with its investigation by delaying or failing to submit requested documents, warning such acts could be seen as acts of obstruction that could be considered in possible future penalties.

It also called on the company to make improvements to its response measures to the leak, such as adding a function within its mobile app and website for users to look up whether their data has been breached.

Meanwhile, ordering a temporary suspension of business operations at e-commerce giant Coupang may be possible, the head of South Korea's antitrust watchdog said, amid an ongoing investigation over a recent large-scale data breach at the U.S.-listed company.

"If an order is not implemented or if it is deemed insufficient to provide relief to affected consumers, a business suspension is also possible," Ju Byung-gi, chairman of the Fair Trade Commission (FTC), said in a radio interview.

Coupang announced the results of its internal probe on Dec. 25, saying a former employee had stolen personal information from 33.7 million user accounts but saved data from only about 3,000 accounts, which, it claimed, was later deleted.

- IANS

Share this article:

Reader Comments

R
Rohit P
33 million users affected! That's a huge number. And they are being uncooperative with the investigation? Sounds like they have something to hide. The threat of a business suspension is a strong message. Hope Indian regulators take note for our e-commerce giants.
D
David E
The part about adding a function for users to check if their data was breached is crucial. Transparency is key after such incidents. Flipkart and Amazon India should proactively implement such features, not wait for a breach to happen.
A
Anjali F
"Saved data from only about 3,000 accounts" – how can they be so sure? And they claim it was deleted. This internal report seems like a PR exercise to downplay the severity. The regulator is absolutely correct to call them out. 🙄
S
Siddharth J
While the company's actions seem questionable, I hope the investigation is fair and based on facts. Sometimes regulators can be overzealous. The goal should be to protect consumers, not just to penalize companies. A balanced approach is needed.
K
Kavya N
Names, phone numbers, addresses... this is a goldmine for scammers and telemarketers. The mental peace of 33 million people is disturbed. The penalty must be severe enough to set an example. Data security is non-negotiable.

We welcome thoughtful discussions from our readers. Please keep comments respectful and on-topic.

Leave a Comment

Minimum 50 characters 0/50