Seoul, June 10, 2026, 20:10 KST
- Coupang’s U.S. shares gained 4.68% to $15.90 late Tuesday, as traders looked to a privacy decision in Seoul, not earnings, for what’s next for the stock.
- South Korea’s Personal Information Protection Commission is looking at penalties after a breach hit over 33 million pieces of personal information, according to .
- Regulators could set the legal maximum at around 1.36 trillion won using a basic 3% revenue formula, but they have room to move the actual fine up or down depending on the scope of revenue and other factors.
Coupang, Inc. shares climbed on Tuesday, catching attention not for its usual sales angles but because a South Korean privacy ruling could soon put a price tag on last year’s big customer data breach. CPNG ended the session up 4.68% at $15.90 in New York, after finishing at $15.19 on Monday.
What’s new today is timing. South Korea’s Personal Information Protection Commission met to consider whether to sanction Coupang over a data breach regulators say leaked over 33 million pieces of personal information. The issue has weighed on Coupang shares since late 2025. Now, officials are closer to a call.
The market is focused on the scale. Yonhap said the commission started its review about seven months after Coupang revealed the breach, adding that regulators sent the company a prior notice in April and reviewed how Coupang replied. Yonhap also said Coupang pushed back against most of the commission’s findings.
South Korea’s data-leak penalty law allows fines up to 3% of revenue from violations, but the figures aren’t fixed. If applied directly to Coupang’s 45.5 trillion won in 2025 revenue, that tops out at about 1.36 trillion won, according to Yonhap. The final penalty though is affected by how much revenue counts, the nature of the violation, and adjustments for severity or other factors.
The difference is important for the stock. A headline number at the high end could wipe out near-term profits. But a record fine that stays well under the cap might not get the same reaction, even with the recent selling. The privacy commission’s biggest penalty on record was 134.8 billion won, given to SK Telecom for a SIM-data leak, Yonhap said.
Coupang’s filings point to bigger issues than just its reputation being hit. The company posted $8.5 billion in first quarter revenue, up 8% year-on-year, but recorded a net loss of $266 million to shareholders. Adjusted EBITDA dropped hard, falling to $29 million versus $382 million a year ago. That’s Coupang’s own preferred metric for operating profit before interest, taxes, depreciation and amortization.
Coupang pointed to the incident as a source of pressure. In its first-quarter Form 10-Q, the company said it had issued about $1.2 billion in customer vouchers after the breach. Most of the redemptions happened in the first quarter and ended by mid-April. Coupang also said the incident could bring more costs from remediation, inquiries, enforcement, and lawsuits.
There is a counterweight. Coupang bought back roughly 20.4 million Class A shares in the first quarter at an average price of $19.14 and said its board has cleared a fresh $1 billion for more repurchases. A buyback, when a company buys up its own stock, can lower the share count and signals confidence, but it doesn’t take away the cash cost of a regulatory penalty.
Coupang is also trying to limit the fallout. ETNews said the company claimed only names, emails, phone numbers, addresses, some order history and a few apartment entrance codes got out, but that no payment info, financial data, user IDs, passwords or ID documents were breached. Coupang also challenged the government’s count on entrance code leaks, telling the outlet that only 2,609 accounts were affected.
Regulatory pressure increased this week as South Korea’s fair-trade regulator fined Coupang’s Korean unit 500 million won. Officials said the case involved misleading paid-membership customers about discounts. That’s the maximum fine possible for this infraction, though it’s not a big sum for Coupang.
Investors face more than just a one-off fine from the privacy ruling. A steep penalty, extra remedial measures, or findings that open the door for lawsuits could push legal costs higher and pull management’s attention. If trust with customers keeps eroding, the impact might not be a simple charge. Instead, Coupang could see growth slow for active customers, order frequency slip, and margins stay under pressure in its core Korea commerce line.
Sanctions on Coupang could be out soon. YTN said Wednesday night in Seoul that the sanction type and size of the fine could be made public as early as Thursday morning. That figure will tell if Tuesday’s bounce was just a relief move or if traders will have to rethink Coupang’s regulatory risk.
