The information protection advisory committee, co-chaired by Coupang chief information security officer Brett Mathis and Korea Chief Private Officers' Forum president Hur Sung-wook, held its first meeting the on same day and will convene quarterly.
Lawyers from two large Seoul firms and four university professors fill the remaining seats.
The company said the panel's findings will be written into internal security rules and work processes.
The security measure enhancement follows after a record fine of 624.68 billion won ($460.6 million) slapped on by the Personal Information Protection Commission (PIPC) on June 10, the heaviest privacy penalty ever levied in South Korea.
The PIPC concluded that sloppy management of an authentication signing key and weak access controls let a former employee harvest user records for about five months.
The regulator also ordered the company to strengthen safeguards, notify non-members whose data leaked and guarantee a substantive role for its privacy chief, and said it would verify compliance within three months.
Coupang's monthly active users reached 35.95 million in August, above the 34.38 million logged in October 2025, before the breach surfaced, according to Mobile Index.
Estimated card spending on the platform came to 4.93 trillion won that month.
AJP Takeaways
- Coupang launched an information protection advisory committee of seven outside experts on Sept. 15, 2026, co-chaired by chief information security officer Brett Mathis and CPO Forum chairman Huh Sung-wook, with quarterly meetings planned.
- South Korea's Personal Information Protection Commission fined Coupang Corp. 624.68 billion won ($410 million) on June 10, 2026, over a leak affecting about 37.55 million people, the largest privacy penalty in the country's history.
- Coupang's monthly active users stood at 35.95 million in August 2026, above the 34.38 million recorded in October 2025 before the breach was disclosed.
Copyright ⓒ Aju Press All rights reserved.
