Coupang Spending Hits Record Highs a Year After Massive Data Breach
South Korea's e-commerce leader sees payment volumes soar despite a security failure that exposed 33.7 million users.
Coupang Inc. has seen its monthly card payment volume reach record levels as of September 2026. The surge in spending indicates a robust recovery for the e-commerce giant nearly a year after a catastrophic security failure sparked fears of a mass customer exodus.
Record-breaking payment volume suggests the company has largely shrugged off the fallout from its 2025 security crisis. The recovery follows a period of intense scrutiny after a massive data breach discovered in November 2025 affected approximately 33.7 million customer accounts. The scale of the incident was unprecedented, surpassing the previous benchmark of 23.24 million users leaked during an SK Telecom incident, making it one of the worst data breaches in South Korean history.
A Failure of Detection
The breach was characterized by a significant delay in detection. The leak began on June 24, 2025, yet remained undetected by Coupang's internal systems for nearly five months. The company did not discover the intrusion until November 18, 2025. This gap raised critical questions regarding the adequacy of internal data protection systems at a company often described as the "Amazon of South Korea."
Market Dominance vs. Privacy
The return to record spending levels highlights a stark tension between consumer privacy concerns and service utility. Coupang's market dominance, driven largely by its highly efficient "Rocket Delivery" infrastructure, appears to have created a level of consumer dependency that outweighs the perceived risk of data exposure. For many South Korean users, the convenience and speed of the platform have proven more influential than the security failures of the previous year.
The Path Forward
While financial metrics suggest a full recovery, the incident remains a landmark failure in regional cybersecurity. The industry will continue to watch whether this resilience is a permanent trend or if future security lapses will eventually erode the trust of the 33.7 million affected users. For now, the data indicates that Coupang's grip on the domestic e-commerce market remains firm despite the severity of the 2025 leak. The company's ability to maintain growth suggests that in the competitive landscape of South Korean retail, logistical superiority can effectively insulate a firm from the long-term reputational damage of a privacy crisis.