South Korea just handed down its largest-ever data breach fine, and e-commerce platform Coupang is paying the bill.
The country's Personal Information Protection Commission (PIPC) fined Coupang 624.7 billion won — roughly $409 million — over a data breach, marking the single largest privacy penalty in South Korean history. The fine dwarfs the previous record: SK Telecom was hit with 134.8 billion won last year for its own breach. The gap is not close — this ruling is nearly three times larger than anything that came before it.
That multiplier is the real story. Regulators don't triple records accidentally; the PIPC is signaling that it intends to issue fines proportional to company scale and breach severity, not calibrated to whatever the market has grown comfortable absorbing. For any company operating at Coupang's size in South Korea, the prior enforcement ceiling just got demolished — and compliance budgets calculated against the old record are now badly undercalibrated.
Coupang is publicly traded in New York, which means this fine will show up in SEC filings and on earnings calls — a useful reminder that South Korean regulators now have the reach to move numbers that American investors watch.