The leakage of over 30 million Coupang prospects’ data together with names, cellphone numbers, and addresses was made not by way of exterior hacking however allegedly by an insider.
Based on knowledgeable sources on Nov. 30, Coupang buyer data was reportedly leaked by a Chinese language nationwide who had labored at Coupang.
The Seoul Metropolitan Police Company’s Cyber Investigation Division acquired a criticism from Coupang on Nov. 25 relating to this incident and has launched an investigation into the non-public data leak.
Nevertheless, considerations have been raised about potential difficulties within the investigation, as this worker is a overseas nationwide who has reportedly already left Coupang and departed from Korea.
Whereas the criticism submitted by Coupang to police doesn’t specify the accused and lists them as “title unknown,” Coupang had beforehand indicated that this data leak incident was not brought on by exterior components corresponding to hacking.
In an announcement on Nov. 20, Coupang stated, “It has been confirmed that buyer private data was accessed with out authorization,” and “We’ve got confirmed that there are not any traces of exterior intrusion into Coupang’s system and inner community.”
Coupang has confirmed that roughly 33.7 million buyer accounts have been leaked thus far. This corresponds to the data of three out of each 4 adults in Korea and is estimated to be equal to nearly all of Coupang’s accounts.
Whereas large-scale data leaks at SK Telecom and KT had been primarily brought on by hacking, this incident is presumed to be worker misconduct, revealing gaps in Coupang’s inner administration.
The dimensions of Coupang’s buyer data leak matches the 2011 Cyworld and Nate incident, which affected roughly 35 million folks. That incident was brought on by hacking.
SK Telecom’s private data leak, which resulted within the largest fantastic ever (134.8 billion received or roughly $) from the Private Data Safety Fee for private data safety violations, was additionally a hacking incident.
Individually from the police investigation, the federal government has shaped a joint investigation staff with the personal sector to investigate the reason for the incident.
The Ministry of Science and ICT plans to kind a public-private joint investigation staff relating to Coupang’s safety incident and large-scale private data leak to investigate the reason for the incident and put together measures to forestall recurrence.
Moreover, the Private Data Safety Fee has acquired leak stories from Coupang twice on Nov. 20 and 29 and is conducting an investigation. The Private Data Safety Fee has said its coverage to strictly impose sanctions if violations of security measure obligations below the Private Data Safety Act are confirmed.