Coupang, Inc. Faces Securities Class Action Over Data Breach and Executive Departure

Coupang, Inc. (NYSE: CPNG) is in the spotlight following the filing of a securities class action lawsuit, *Barry v. Coupang, Inc., et al.*, in the Northern District of California. This legal action seeks to represent investors who purchased Coupang securities between August 6, 2025, and December 16, 2025. The lawsuit comes amid serious allegations regarding a massive data breach and the company's purported failure to disclose this incident in a timely manner.

Since a *Reuters* article published on November 30, 2025, which reported the data breach that affected 33.7 million customers, Coupang has seen over $8 billion wiped off its market capitalization. The news has significantly impacted investor confidence, driving the stock price down as concerns about the company’s cybersecurity measures and transparency rise.

National shareholders rights firm Hagens Berman has initiated an investigation into potential violations of securities laws by Coupang. Central to the lawsuit are claims that Coupang misled investors regarding the adequacy of its cybersecurity protocols. The firm asserts that the company may have failed to notify investors within the required four-day period following material cybersecurity incidents, as mandated by the Securities and Exchange Commission (SEC).

Coupang has previously assured investors of its robust cybersecurity measures, stating that its reliance on encryption and authentication technology is designed to securely transmit confidential information. However, the lawsuit questions whether these measures were truly effective, especially in light of the breach attributed to a former employee who maintained access credentials even after leaving the company.

The breach was first detected on November 18, 2025, yet it was not until November 30 that *Reuters* reported the incident, prompting widespread concern. Subsequent media coverage revealed that the South Korean government held emergency discussions to determine if Coupang had violated data safety regulations.

On December 10, 2025, Coupang's CEO of its South Korean e-commerce unit resigned as the fallout from the breach intensified. Following that, South Korean police conducted raids on Coupang’s offices in Seoul, further escalating the scrutiny facing the company.

Just days later, on December 16, Coupang filed an interim report on Form 8-K, acknowledging the cybersecurity incident and warning stakeholders about potential financial ramifications, including revenue loss and increased regulatory penalties.

Reed Kathrein, a partner at Hagens Berman leading the investigation, emphasized the firm's focus on the timeline of Coupang’s awareness of the breach's material implications and whether the company adhered to SEC disclosure requirements. “We’re focused on when Coupang determined that the November 2025 breach was material and whether the company timely reported it,” he noted.

Investors who have experienced significant losses due to the data breach and subsequent stock price decline are encouraged to submit their claims. Hagens Berman is actively seeking individuals with knowledge that could assist in their investigation, and the firm has established resources for potential whistleblowers.

As Coupang navigates through this turbulent period marked by legal challenges and eroded investor trust, the outcome of the securities class action lawsuit will be closely watched. The case not only underscores the critical importance of cybersecurity in the digital age but also highlights the necessity for transparency in corporate communications, particularly in handling sensitive information. The implications of this incident may resonate far beyond Coupang, impacting investor confidence in the broader e-commerce and tech sectors.