Coupang Discloses 33.7 Million-Account Breach, Triggers State Probe and Political Uproar

Insider-enabled mega breaches are not new—think Edward Snowden’s 2013 NSA leaks or the 2014 South Korean credit-card incident that exposed 104 million records—yet each recurrence shows how institutions still treat identity data as an operational afterthought. The Coupang episode spotlights three long arcs: (1) platform centralization that concentrates risk, much as rail monopolies did in the late 19th-century United States; (2) the growing geopoliticization of data flows—suspicions of a Chinese ex-employee echo the 2015 U.S. OPM hack attributed to China; and (3) the slow, regulatory ratchet toward harsher liability, mirroring how the 1911 Triangle Shirtwaist fire birthed modern workplace safety laws. On a century scale, the incident matters because digital identifiers have become the social infrastructure of a post-industrial society; losing them en masse erodes public trust and accelerates calls for data localization, zero-trust architectures, and possibly decoupled tech stacks between rival blocs. If South Korea, a country famed for strict privacy statutes, cannot guard its crown-jewel e-commerce platform, future data citizenship may shift from voluntary consent to state-mandated protectionism.