8-K/ARegulation FDOther EventsExhibits & Filings

Coupang, Inc. 8-K/A Report, Cybersecurity Incident (Dec 29, 2025)

Filed December 29, 2025For Securities:CPNG

Summary

Coupang, Inc. has filed an 8-K/A to provide crucial updates regarding a previously disclosed cybersecurity incident. The company announced that the perpetrator has been identified and is cooperating with investigators, having surrendered all relevant devices. While approximately 33 million accounts were accessed, the investigation indicates that only limited data from about 3,000 customer accounts was saved, and this data has since been deleted without being shared with any third party. This development suggests a potentially contained breach with mitigated data exfiltration risk for the vast majority of affected customers. However, Coupang is implementing a significant customer compensation program. The company will issue approximately 1.685 trillion Korean Won (roughly $1.2 billion USD) in vouchers to customers notified of the incident in late November 2025. These vouchers, redeemable for future Coupang purchases starting January 15, 2026, will be recognized as a reduction to selling prices and, consequently, revenue. This financial commitment underscores the company's response to the incident and its potential impact on future financial reporting.

Key Highlights

  • 1Perpetrator identified and cooperating with investigation; all devices secured.
  • 2Limited data saved from only ~3,000 customer accounts; data deleted without third-party sharing.
  • 3Approximately 33 million accounts accessed in total.
  • 4Customer compensation program to issue ~1.685 trillion KRW (~$1.2 billion USD) in vouchers.
  • 5Vouchers will be applied towards future Coupang purchases starting January 15, 2026.
  • 6Vouchers will be recognized as reductions to selling price and revenue.
  • 7Investigation into the cybersecurity incident remains ongoing.

Frequently Asked Questions

While approximately 33 million customer accounts were accessed, the investigation indicates that the perpetrator only saved limited data from approximately 3,000 customer accounts. Crucially, this data was deleted without having been shared with any third party.

Coupang is launching a customer compensation program by issuing approximately 1.685 trillion Korean Won (approximately $1.2 billion USD) worth of vouchers. These vouchers are for customers who were notified of the incident at the end of November 2025 and can be applied towards future Coupang purchases, starting January 15, 2026.

The vouchers issued as compensation will be reflected as reductions to the selling price and revenue recognized on each corresponding transaction where the voucher is applied. This means that the value of the vouchers will directly reduce the company's reported revenue when redeemed.

No, the investigation regarding the cybersecurity incident is ongoing. Coupang is cooperating with investigators and will provide further updates as developments occur.