TAIPEI (Taiwan News) — South Korean e-commerce company Coupang said Tuesday more than 200,000 Taiwan user accounts were affected by a data incident and it will issue NT$1,000 (US$32) shopping vouchers to each affected customer as part of a compensation plan.
The Administration for Digital Industries said the breach occurred in November and asked Coupang Taiwan to clarify whether local users were affected, per ETtoday. At the time, the company repeatedly responded that “it did not involve the personal data of Taiwanese users.”
However, after receiving a forensic report from cybersecurity firm Mandiant, Coupang Taiwan confirmed to the agency that the incident did, in fact, affect Taiwanese users. The leaked data included user names, email addresses, phone numbers, delivery addresses, and records of the last five orders.
The agency instructed Coupang Taiwan to comply with the Personal Data Protection Act by notifying affected users and offering a compensation plan. Administrative inspections will follow, with possible penalties if infractions are found.
Coupang said the incident, first disclosed on Nov. 29 was caused by a former employee in South Korea who stole customer data from South Korean accounts, per CNA. At the time, there was no evidence that Taiwanese accounts were affected, though the investigation continued.
Mandiant’s investigation found that the employee accessed 204,552 Coupang Taiwan accounts without authorization. Forensic analysis confirmed that data from 3,000 Korean users and one Taiwan account had been stored.
Coupang said there is no evidence that any accessed customer data was viewed, shared, or misused. The access channel was blocked and no longer poses a risk.
The company said it will notify affected Taiwanese customers and fulfill all obligations required under Taiwan law. Starting March 8, affected users will be able to view voucher details and instructions on how to use them.





