South Korean leader calls for penalties over ecommerce data leak

South Korea's president ordered on Tuesday swift action to penalise those responsible for a major data leak at ecommerce giant Coupang affecting more than 33 million customers.

It was "astonishing that the company failed to recognise the breach for five months", President Lee Jae Myung said, adding that the "scale of the damage is massive".

Coupang is South Korea's most popular online shopping platform, serving millions of customers with lightning-fast deliveries of products from groceries to gadgets.


Seoul has said the leak took place through overseas servers from June 24 to November 8.

But Coupang only became aware of it last month, according to police and local media, who said the company had issued a complaint in November against the alleged culprit -- a former employee and a Chinese national.

On Tuesday, Lee ordered the government to "strengthen fines and make punitive damages a reality", calling for "substantive and effective countermeasures".

"The cause of the accident must be quickly identified and (those responsible) must be held strictly accountable," he said.

Police said Monday they were tracing computer IP addresses and looking into possible international collaboration as part of their investigation.

They warned the leak could "threaten the daily lives and safety of every single citizen".

Coupang has told customers that their names, email addresses, phone numbers, shipping addresses and some order histories had been exposed in the leak.

But the company said their payment details and login credentials had not been affected.

The case follows a major breach at South Korea's largest mobile carrier SK Telecom, which was fined about 134 billion won ($91 million) in August after a cyberattack exposed data on nearly 27 million users.

South Korea is among the world's most wired countries, but has also been a target of hacking by arch-rival North Korea.

Police announced last year that North Korean hackers were behind the theft of sensitive data from a South Korean court computer network -- including individuals' financial records -- over a two-year period.

And last month Yonhap News Agency reported that South Korean authorities suspected a North Korean hacking group may be behind the recent cyberattack on cryptocurrency exchange Upbit, which led to the unauthorised withdrawal of 44.5 billion won in digital assets.