South Korean e-commerce giant Coupang saw its operating income plummet by 97% in the fourth quarter of 2025. This dramatic drop from US$312 million to US$8 million follows a significant data breach and increased regulatory pressures in its home market.
The breach, which occurred in December 2025, saw a former employee gain access to personal data of approximately 33 million South Koreans. While sensitive financial details like credit card numbers were not compromised, phone numbers, email addresses, and purchase histories were exposed. Coupang acknowledged the incident negatively impacted its Q4 customer metrics, profitability, and revenue growth. Despite this, total net revenues still grew 11% year-on-year to US$8.8 billion.
Adding to its challenges, Coupang was fined 2.19 billion won (US$1.6 million) by South Korea's Fair Trade Commission for forcing suppliers into price reductions. The company now faces intensified government scrutiny, with officials demanding greater accountability in the wake of the data incident. Early Q1 2026 data suggests some stabilisation, but the financial fallout from these events is substantial.
For businesses in the UK beauty and personal care sector, Coupang’s experience highlights the severe financial and reputational costs associated with data security failures. Even a dominant market player can experience sharp declines when trust is eroded. The dual impact of a data breach and regulatory fines serves as a potent reminder of the need for rigorous data protection measures and transparent communication with both customers and regulators.
