Corporate crises often arise unexpectedly. However, the causes of these crises typically stem from long-standing issues within the organization. Recent controversies involving Starbucks Korea's marketing related to the May 18 Gwangju Uprising and CJ Group's data breach may appear to be separate incidents, but they fundamentally raise the same question: How effectively are companies managing brand risk structurally?
Starbucks Korea's promotional wording drew swift criticism online for evoking memories of the Gwangju Uprising and the torture and death of Park Jong-cheol. Some consumers strongly opposed specific phrases, claiming they recalled the violent memories of the military regime. As the controversy escalated, Jeong Yong-jin ordered a thorough response and Shinsegae Group announced the dismissal of the CEO of Starbucks Korea and related executives.
Notably, Jeong's rapid response indicated a clear recognition of the crisis at the corporate level. He did not treat the issue as a mere online controversy but assessed it as a matter of trust for the entire brand.
However, the essence of this controversy is not merely whether a 'mistake' occurred. The key question is whether the company's internal sensitivity and verification systems functioned properly. In corporate communication, the outcome is more important than the intent. Regardless of the intentions of those involved, if a significant number of consumers associate the content with historical trauma and feel discomfort, brand risk becomes a reality.
In today's landscape, brands symbolize corporate values rather than just product names. Consumers consider not only price and quality but also a company's attitude and philosophy. For global brands, sensitivity to historical, human rights, and social issues is a critical evaluation factor. The Starbucks controversy underscores how sensitive historical issues are in Korean society.
A more significant issue is that the problematic wording passed through internal verification processes without any checks before being made public. A marketing phrase undergoes several stages, including planning, review, and approval, before reaching consumers. If the organization failed to recognize the problem during this process, it indicates a lack of sensitivity across the organization. If they were aware but did not filter it out, it suggests a failure of the verification system itself.
Recently, companies have entered a fierce competition for real-time marketing centered on social media and mobile platforms. There has been an increase in attempts to capture attention with short, provocative phrases. The problem is that speed has begun to overshadow verification. This incident starkly illustrates that content aimed at quick responses can undermine the trust of the entire company.
In contrast, the CJ case reveals a different dimension of brand risk. Recently, it was reported that personal information, including the phone numbers, job titles, internal contact details, and photos of female employees at CJ Group, were posted on a Telegram channel. The company is investigating the incident, focusing on the possibility of internal information retrieval and leakage rather than external hacking, and is preparing to report to relevant authorities and request an investigation.
The core of this incident is not merely the data breach. It highlights that in the digital age, a company's core assets have shifted to data and trust. Personal information is not just numbers or text; it is sensitive information directly related to individual safety. The combination of phone numbers, photos, and job titles increases the risk of secondary harm.
The CJ incident illustrates that many Korean companies' security systems still focus primarily on 'defending against external intrusions.' While significant investments are often made to block external hacking, internal risk management is frequently weaker. The fact that information accessible on internal intranets was leaked externally suggests potential gaps in access control management and anomaly detection systems.
Ultimately, while the two incidents may seem entirely different, they share clear commonalities. The Starbucks controversy stems from a failure in content verification, while the CJ incident reflects a failure in internal controls. Both arise not from external attacks but from vulnerabilities within the organization's internal systems.
Another point of interest is the differing responses from the leaders of the two groups. Jeong Yong-jin emphasized immediate personnel actions and public responses, while Lee Jae-hyun's CJ Group has maintained a relatively cautious approach, focusing on investigations and requests for inquiries. Despite their different styles, both leaders recognized that the issues are directly tied to brand trust.
However, in managing brand risk, speed of response is not the only important factor. Structural improvement is even more critical. Analyzing why problems occurred at an organizational level and changing systems to prevent recurrence is essential. If the focus remains solely on punishing responsible individuals, similar crises are likely to recur.
We are now in an era where non-financial risks influence corporate value. In the past, sales, market share, and productivity were the core of corporate competitiveness, but now factors such as data protection, ethical awareness, historical sensitivity, and organizational culture determine brand value. Global investors also consider ESG and internal control systems as important evaluation criteria.
In the end, both Lee Jae-hyun and Jeong Yong-jin find themselves on a significant test. How they change their organizations and establish standards following these crises will likely influence future group trust. A one-time apology and personnel changes will not suffice. Only by genuinely strengthening internal controls and organizational sensitivity can these crises become opportunities for systemic improvement.
Brands are not built through advertising; they are shaped by how crises are handled. These incidents send a clear message to the Korean corporate sector: brand risk is no longer a secondary issue but a central management agenda.
* This article has been translated by AI.
Copyright ⓒ Aju Press All rights reserved.