CPNG Did a 33-Million-Account Data Breach Just Sink the Holiday Quarter?

The Quarter a Data Breach Ate

Coupang's fourth quarter is normally its strongest of the year - holiday shopping season, the quarter this site has tracked delivering outsized Product Commerce margins in three of the last four years. Instead, on November 18, 2025, a former employee obtained unauthorized access to customer accounts and walked away with names, phone numbers, delivery addresses, and email addresses tied to approximately 33 million customer accounts, along with order histories for a subset of them (the "Incident"). No banking information, payment card data, login credentials, or government IDs were involved, but the fallout was immediate and large: Coupang Corp. announced a Customer Compensation Program worth approximately $1.2 billion in vouchers, to be issued starting January 2026, and by early 2026 had been named in new securities and consumer class actions plus a stockholder derivative suit - all layered on top of the KFTC and criminal-indictment matters already running since 2024 (see Beyond the Usual).

The headline full-year numbers still look good in isolation: total net revenues grew 14.1% to $34.534 billion, and net income more than tripled to $214 million from $66 million in 2024. But that full-year read hides what actually happened in the quarter this filing covers. By subtracting the nine months already reported in the Q3 2025 10-Q from this 10-K's full-year totals, Q4 2025 alone shows revenue growth decelerating to 10.9% YoY (from Q3's 17.8%) - management's own MD&A attributes the slower growth in Product Commerce Active Customers^» this quarter "primarily due to seasonality and the impact of the Incident on customer demand" - and a swing to a net loss of roughly $26 million, from $131 million of net income in Q4 2024. Free cash flow, which swung positive to $442 million in Q3, reversed again in Q4 to an implied $(278) million, from +$462 million a year earlier, as capital expenditure jumped to $360 million (from $214 million) while operating cash flow collapsed to just $82 million (from $676 million). Part of the Q4 2024 comparison base was itself inflated by a one-time $175 million fulfillment-center-fire insurance gain that won't recur - so the swing isn't purely the breach's doing - but the magnitude of the reversal, arriving in what should have been Coupang's best quarter, is the real story of this filing.

The Prescription

Coupang should keep disclosing the Incident with the same specificity it used this filing - the exact date of discovery (November 18, 2025), the precise scope (33 million accounts, no financial or credential data), and a dollar-quantified remediation program ($1.2 billion in vouchers) rather than vague reassurance language. That specificity is what let this post separate the breach's disclosed cost from the ordinary base-effect noise (the 2024 insurance gain) sitting in the same year-over-year comparison - a reader deserves to know which parts of a bad quarter are new and which are recycled math.

What it should stop doing: leaving a former employee's access to production customer-data systems intact after that employee's departure. Coupang's own filing states the Incident was "a former employee who obtained the name, phone number, delivery address..." - the breach vector wasn't a sophisticated external attack, it was inadequate access revocation for someone no longer working there. A company that runs fulfillment centers, payment rails, and now a $1.2 billion remediation program can afford identity-and-access management that automatically revokes credentials the day an employment relationship ends; disclosing the breach well is a good habit, but the actual fix is upstream of any disclosure.

Key Financial Metrics

FY2025 vs. FY2024 - reported in USD, figures from this 10-K's consolidated financial statements

Coupang reports natively in US dollars, so no FX conversion is needed here. Figures are drawn directly from this Form 10-K's consolidated financial statements and MD&A tables, covering the year ended December 31, 2025.

Metric	FY2025	FY2024	YoY
Total net revenues	$34,534M	$30,268M	✅ +14.1%
Gross profit	$10,141M	$8,831M	✅ +14.8%, margin 29.4% vs 29.2%
Operating income	$473M	$436M	✅ +8.5%
Adjusted EBITDA»	$1,490M	$1,375M	⚠️ +8.4%, margin 4.3% vs 4.5%
Income before income taxes	$597M	$473M	✅ +26.2%
Income tax expense	$383M	$407M	✅ -5.9%, effective rate 64.2% vs 86.0%
Net income (consolidated)	$214M	$66M	✅ +224.2%
Net income attributable to Coupang stockholders	$208M	$154M	✅ +35.1%
Net cash provided by operating activities	$1,773M	$1,886M	⚠️ -6.0%
Free cash flow»	$527M	$1,016M	⚠️ -48.1%
Cash & cash equivalents (period end)	$6,318M	$5,879M	✅ +7.5%

Balance sheet metric	Dec 2025	Dec 2024	Change
Total assets	$17,787M	$15,344M	✅ +15.9%
Total liabilities	$13,164M	$11,167M	⚠️ +17.9%
Total equity	$4,623M	$4,102M	✅ +12.7%
Redeemable noncontrolling interest	$0M	$75M	- unchanged since Greenoaks' exit, see Q1 2025

Total short- and long-term debt (short-term borrowings, current portion of long-term debt, and long-term debt) rose modestly to $1.608 billion at year-end from $1.533 billion a year earlier, but actually fell from the $1.989 billion reported at Q3 2025's quarter-end - Coupang paid down a meaningful chunk of short-term borrowings in Q4. Capital expenditure told the opposite story from debt: full-year purchases of property and equipment jumped 42.3% to $1.251 billion (from $879 million in 2024), reversing the modest Q3-only decline this site flagged last quarter - the Q3 dip turns out to have been a one-quarter pause inside a year that, on net, still accelerated fulfillment-center spending. The effective tax rate improved to 64.2% from 86.0% a year ago - both still far above the U.S. statutory rate, driven by Korean taxes on foreign income and non-deductible items, though 2025 got some relief from OBBBA provisions flagged last quarter.

Segment Performance: Product Commerce vs. Developing Offerings

Coupang reports the same two segments as every quarter since Q1 2022: Product Commerce (core retail, marketplace, Rocket Fresh, and related advertising) and Developing Offerings (Coupang Eats, Coupang Play, Taiwan retail, fintech, and Farfetch).

Metric	Product Commerce FY2025	Product Commerce FY2024	Developing Offerings FY2025	Developing Offerings FY2024
Net revenues	$29,592M	$26,699M	$4,942M	$3,569M
Revenue growth	✅ +10.8%	-	✅ +38.5%	-
Segment Adjusted EBITDA	✅ $2,485M (margin 8.40%)	$2,006M (margin 7.51%)	⚠️ $(995)M (margin -20.13%)	$(631)M (margin -17.68%)

Product Commerce's full-year margin expanded to 8.40% from 7.51% a year ago, extending the multi-year improvement this site has tracked, though the year contained real intra-year volatility: it hit a record 9.04% in Q2, cooled to 8.83% in Q3, and, by subtraction, fell further to an implied 7.65% in Q4 - its weakest quarter of the year, and only modestly ahead of Q4 2024's 7.83%. A holiday quarter finishing as the year's weakest for Product Commerce margin is itself the seasonality story inverted: management's own explanation (seasonality plus the Incident's demand impact) suggests the usual Q4 lift didn't show up this year.

Developing Offerings' full-year loss widened 57.7% to $(995) million from $(631) million, with the margin deteriorating to -20.13% from -17.68% - continuing the trend flagged in Q3 on Taiwan investment. By subtraction, Q4 2025's segment loss came to an implied $(300) million (margin -21.03%), nearly double Q4 2024's $(118) million (margin -10.90%) - the widest single-quarter loss margin this site has tracked for the segment, extending rather than reversing Q3's deterioration.

Key Operational Metrics

Quarter	Product Commerce Active Customers	Net revenues per Product Commerce Active Customer
Dec 2024	22.8M	$302
Mar 2025	23.4M	$294
Jun 2025	23.9M	$307
Sep 2025	24.7M	$323
Dec 2025	24.6M	$301

Product Commerce Active Customers^» grew 8% YoY to 24.6 million in Q4 2025 - still growth, but the slowest pace of any quarter this site has tracked in 2025 (versus 9-10% in the first three quarters), and the customer count actually fell slightly from Q3's 24.7 million, the first sequential decline since this site began tracking the metric. Net revenues per Product Commerce Active Customer was flat YoY at $301 (up 3% on a constant-currency basis), down from Q3's $323 - a genuinely weak combination for a holiday quarter, consistent with management's own attribution of slower growth to "seasonality and the impact of the Incident on customer demand."

"Not available" again this filing: orders per customer, Rocket WOW membership subscriber count, and third-party seller/merchant count - none disclosed, consistent with every prior quarter this site has tracked.

A Year of Gains Round-Tripped in Ten Weeks

Coupang closed FY2025 (December 31, 2025) at $23.59, down 26.7% from Q3 2025's close of $32.20 and up just 7.3% from a year earlier - a sharp reversal from Q3's report of the highest close in this site's trailing two-year window. The monthly path makes the timing unmistakable: the stock held at $31.97 through October, then fell to $28.16 by the end of November (the Incident was disclosed November 18) and to $23.59 by year-end - a two-month, ~26% decline that erased essentially all of 2025's re-rating gain and left the stock barely above where it closed 2024. This isn't a case of "stock price is like your mood" noise to shrug off: the timing lines up precisely with a disclosed, quantified operational event (the breach and its $1.2 billion compensation program), not a broad market move.

Beyond the Usual

A former employee's unrevoked access exposed 33 million customer accounts, triggering a $1.2 billion compensation program and new litigation

On November 18, 2025, Coupang Corp. discovered that a former employee had used retained access to obtain the names, phone numbers, delivery addresses, and email addresses of approximately 33 million customer accounts, plus order histories for a subset of them. No financial, payment, credential, or government-ID data was involved, and Coupang disabled the access method, notified regulators and affected customers, and briefed its Board upon discovery. But the consequences compounded quickly: Coupang Corp. announced a Customer Compensation Program of approximately $1.2 billion in vouchers, beginning in January 2026, which the filing itself says "may reduce net revenues growth and profitability primarily in the first quarter of 2026" as vouchers get redeemed against future purchases. Separately, Coupang is now subject to Korean government scrutiny including National Assembly appearances by senior leadership and prosecution referrals for failures to appear, and has been named in a putative U.S. securities class action (filed January 6, 2026, covering purchasers of Class A stock between May 7 and December 16, 2025), a stockholder derivative action (Warga v. Bom Kim, et al., filed in the Northern District of California), and a separate putative consumer class action - all layered on top of the KFTC and criminal matters already running (see next item). This is a genuinely new and material threat, not a continuation of anything this site has tracked before, and its full cost - regulatory fines in Korea, litigation exposure in the U.S., and the $1.2 billion voucher program itself - is still unfolding as of this filing.

The KFTC's product-ranking case reached a seventh scheduled hearing, and a second KFTC front opened over Eats-WOW bundling

The KFTC administrative appeal tracked since Q4 2024 added hearings in September and November 2025, with a seventh hearing now scheduled for February 2026 - six hearings held with still no ruling on the underlying product-rankings finding. The related criminal indictment against Coupang Corp. and CPLB held hearings in October and December 2025, with the next set for March 2026; the maximum penalty remains a fine of approximately $200,000, trivial next to the $121 million administrative fine already being paid in installments (final payment due June 2026). Separately, a second KFTC front escalated this year: the regulator's investigation into whether bundling Coupang Eats benefits with Rocket WOW membership violates Korea's Fair Trade Act - open since September 2024 - produced an examiner's report in October 2025 arguing the bundling is impermissible. If the KFTC ultimately agrees, Coupang could be forced to unbundle Eats from WOW, which the company itself says could make WOW membership less attractive to customers. No ruling has landed on either front yet, but both are moving forward rather than sitting static.

A one-time Korean tax-rate change trimmed the effective tax rate in the fourth quarter

Korea raised its corporate tax rates by 1 percentage point across all taxable-income brackets, effective January 1, 2026. Under U.S. GAAP, a company must recognize the effect of a tax-law change in the period it's enacted rather than the period it takes effect - so Coupang booked a one-time, immaterial tax benefit in Q4 2025 from revaluing its Korean net deferred tax assets ahead of the higher future rate. It's a small, mechanical item on its own, but it's a reminder that Coupang's genuinely volatile effective tax rate (64.2% for the full year, still nowhere near the U.S. statutory rate) is being pushed around by discrete Korean tax-policy events almost every year this site has tracked it.

The forward contractual-commitment ladder totals $6.6 billion of undiscounted payments, most of it due within three years

This filing's commitments table lays out Coupang's minimum contractual obligations by year for the first time in this level of combined detail: unconditional purchase obligations of $2.132 billion, long-term debt (including interest) of $710 million, and operating leases of $3.729 billion, totaling $6.571 billion of undiscounted future payments. Of that, $1.326 billion comes due in 2026 alone (mostly operating leases at $721 million and purchase obligations at $580 million), with the load easing gradually through 2030 before a $811 million "thereafter" tail. None of this is off-balance-sheet in the hidden-debt sense - operating leases already sit on the balance sheet as right-of-use assets, and the purchase obligations are disclosed rather than buried - but seeing the full five-year ladder in one table makes clear just how front-loaded Coupang's near-term cash commitments are relative to this year's $527 million of free cash flow.

Reverse-factoring balances grew at a much slower pace than the year before

Confirmed invoices owed to financial institutions under Coupang's supplier financing arrangements (reverse factoring, where a bank pays Coupang's suppliers early and Coupang repays the bank on its own schedule) rose to $485 million at year-end from $443 million a year earlier - growth of just 9.5%, a sharp deceleration from the 22% YoY pace flagged after Q3. These balances still sit inside accounts payable rather than as a separate debt line, so a portion of reported trade-payables growth remains bank-financed working capital rather than extended supplier terms - but the slower growth this year suggests Coupang isn't leaning on the structure materially harder than it did in 2024.

Target Valuation Range

EV $38.3 billion, ~1.11x EV/Revenue. Bottom line: Coupang's EV/Revenue multiple compressed to roughly 1.11x at year-end, down sharply from Q3 2025's ~1.59x and back near where it started 2025 - a full round trip of the year's re-rating, driven almost entirely by the market pricing in the data-breach fallout rather than any change in the underlying operating trajectory.

With 1,665 million Class A shares and 158 million Class B shares outstanding (1,823 million total) as of December 31, 2025, and a year-end close of $23.59, that implies a market capitalization of approximately $43.0 billion - down from Q3's $58.7 billion on the falling share price alone (share count barely moved).

Using cash and cash equivalents of $6.318 billion against total debt of approximately $1.608 billion, net cash comes to roughly $4.710 billion, putting enterprise value at approximately $38.3 billion - down from Q3's $53.5 billion.

Market cap → enterprise value	Q4 2025
Share price (period-end)	$23.59
Shares outstanding (Class A + B)	1,823 million
Market capitalization	$43.0 billion
Net cash (cash & equivalents less total debt)	$4.710 billion
Enterprise value	$38.3 billion

EV/Revenue sanity check	Q3 2025	Q4 2025	Change
Enterprise value	$53.5 billion	$38.3 billion	down
EV/Revenue	1.59x	1.11x	down

• EV/Revenue^» using full-year revenue (FY2025's $34.534 billion, since this is the fiscal year-end): ~1.11x, down from Q3's ~1.59x - the multiple gave back essentially all of 2025's gains and sits close to where it started the year (~1.13x in Q1).

DCF and reverse DCF (illustrative only): twenty quarters of public-company data now cover Q3 2021 through Q4 2025. Checking this quarter against Q3 2025's base case:

Scenario	Assumption / outcome
Current (period-end close)	Actual EV/Revenue this quarter, for reference: 1.11x
Q3 2025 base case	The Q3 2025 base case called for the KFTC matters to continue without near-term resolution, Product Commerce's margin to hold in the high-8s%, the buyback to continue at a similar modest pace, and the multiple to hold in the 1.5x-1.7x range, with Q4 seasonality plausibly pushing it higher. Two of four landed roughly on script: the KFTC matters remain unresolved (see Beyond the Usual), and the buyback actually accelerated well beyond Q3's pace - Coupang repurchased roughly $163 million of stock in Q4 alone (about 6.0 million shares), nearly double Q3's $81 million, almost exactly what the bull case anticipated. The other two missed badly to the downside: Product Commerce's margin fell to an implied 7.65% in Q4, its weakest of the year rather than a seasonal high, and the multiple didn't hold 1.5x-1.7x - it collapsed to ~1.11x. Neither the base nor the bull case anticipated a data breach; the single biggest driver of this quarter's outcome wasn't in any of last quarter's scenarios.
Bear case for next quarter	Bear case for next quarter: the $1.2 billion voucher redemption materially dilutes Q1 2026 net revenue growth and margin as guided, additional securities or consumer litigation over the Incident is filed, the KFTC's Eats-WOW bundling probe escalates toward a formal finding, and the multiple stays compressed near or below 1.0x.
Base case for next quarter	Base case for next quarter: voucher redemption trims Q1 2026 growth by a modest, guided amount without a larger surprise, the KFTC matters continue without near-term resolution, Product Commerce's margin partially recovers toward the high-7s%, and the multiple stabilizes in the 1.0x-1.2x range.
Bull case for next quarter	Bull case for next quarter: customer engagement shows no lasting damage from the Incident (active-customer growth reaccelerates), the buyback continues near Q4's pace, the KFTC matters stay static rather than escalating, and the multiple recovers back above 1.3x as the market treats the breach as a contained, one-time cost.

---