:

COUPANG DATA BREACH SPARKS US-KOREA JURISDICTION FIGHT

INDUSTRY DESK1 MIN READ
FRI, MAY 22, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

A massive data breach at South Korea's Coupang, a U.S.-listed company, has triggered competing claims between both nations over investigative authority, testing Washington's commitment to protecting its tech companies abroad.

Coupang, South Korea's largest e-commerce platform, faces scrutiny following a significant data breach. The incident has created a jurisdictional standoff, with both the U.S. and South Korean authorities asserting rights to investigate and regulate the company's security practices. The dispute underscores a growing tension in tech governance: companies that operate globally while maintaining corporate registrations in multiple countries face unclear regulatory frameworks. Coupang's U.S. listing gives American regulators a claim on oversight, while South Korea's operational base gives local authorities equal standing. The outcome will shape how tech companies navigate cross-border data protection standards and which nation's enforcement mechanisms prevail in future breaches. It also signals whether the U.S. will prioritize protecting its listed firms' interests abroad or defer to local regulations in foreign markets. The case reflects broader challenges in international tech regulation as companies operate across borders with fragmented legal systems.

■ SOURCES

Rest of World

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

Visa is enabling expired payment cards to continue processing contactless transactions through a new feature. The move allows cardholders to keep using their old cards for tap-to-pay purchases even after expiration.

7H AGOIndustry Desk

A Texas-based student discovered and reported an unauthorized AI system being used for cyberattacks. The disclosure prompted immediate investigation and security responses from affected organizations.

7H AGOAI Desk

Iranian cyber actors shut down a small UK power generation facility for four days, according to sources cited by The Telegraph. The incident coincides with a broader wave of attacks targeting US water utilities attributed to Iran-affiliated groups.

7H AGOSecurity Desk

A supply-chain attack is exploiting legitimate device-update apps to infect Android-based car head units with malware. The compromised devices are being enlisted into proxy botnets or used for ad fraud schemes.

19H AGOSecurity Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.