Coupang (CPNG) Stock Tumble 9% After Security Breach Hits 33 Million Accounts

TLDR

• Coupang shares plunged 9% following disclosure of a data breach impacting 33 million customers in South Korea’s largest leak in over ten years
• Breach began June 24 through overseas servers but remained undetected until November 18, compromising personal data but not payment information
• Former Chinese contractor allegedly exploited an active authentication key after employment ended to access customer databases
• More than 10,000 affected customers are organizing a class action lawsuit seeking at least $68 per person in damages
• Korean government launched investigations into potential security regulation violations and authentication system failures

Coupang experienced a sharp 9% decline in premarket trading following news of a massive security breach. The incident compromised personal information of over 33 million customers.

Coupang, Inc., CPNG

The breach stands as South Korea’s largest data leak in more than a decade. Exposed information includes customer names, email addresses, phone numbers, shipping addresses and order histories.

The unauthorized access started on June 24. The company only discovered the breach on November 18, nearly five months after it began.

Coupang confirmed that payment information and login credentials remained secure. This provides some relief to customers worried about financial fraud.

Investigation Points to Former Employee

South Korean officials opened investigations into the security failure. Science Minister Bae Kyung-hoon stated the attacker “abused authentication vulnerabilities” in company servers.

Authorities are reviewing whether Coupang violated personal information protection laws. The five-month detection gap raises serious questions about security monitoring systems.

The company believes a former Chinese employee orchestrated the breach. This individual previously managed authentication systems for Coupang.

Lawmaker Choi Min-hee revealed the ex-employee used an authentication key that stayed active post-employment. This oversight allowed unauthorized database access for months.

Police are tracking IP addresses linked to the breach. Technical vulnerabilities in Coupang’s systems are under examination.

Legal and Financial Consequences Mount

The breach triggered immediate legal action. Over 10,000 customers plan to file a class action lawsuit against the company.

Attorney Ha Hee-bong estimates compensation could exceed 100,000 won ($68) per affected person. With 33 million victims, potential liability could surpass $2.2 billion.

Some Wall Street analysts maintained their outlook despite the breach. Bank of America Securities and Morgan Stanley kept existing price targets.

These firms highlighted the company’s growth trajectory and response measures. However, insider selling activity increased following the disclosure.

Coupang’s stock had gained 26.33% year-to-date before this selloff. The company carries a market capitalization of $51.44 billion.

Average daily trading volume sits at 11.3 million shares. Technical indicators still showed a “Buy” signal despite the negative news.

Regulatory Scrutiny Intensifies

Korean regulators continue examining the breach timeline. The extended period between occurrence and discovery concerns officials.

Authentication system failures represent a key focus of the investigation. Authorities want to understand how a terminated employee retained system access.

Coupang faces potential fines for regulation violations. The company must also address thousands of customer complaints and legal claims.

South Korean police are working to identify all individuals involved in the breach.

The post Coupang (CPNG) Stock Tumble 9% After Security Breach Hits 33 Million Accounts appeared first on Blockonomi.