South Korea fines Coupang a record ₩624.7 bn over an unrevoked signing key

A regulatory follow-up worth a defender's attention because the root cause is mundane and universal. South Korea's Personal Information Protection Commission issued its largest-ever penalty against e-commerce platform Coupang, attributing a breach of tens of millions of customer records to a signing key that a former employee had stolen before departing and then used to harvest customer data undetected for months (The Record; daily 06-13). Key custody and anomaly detection on signing-key use are the controls that failed — and the months of undetected access is the part that turned an insider theft into a record fine.