A Data Breach Dispute Reaches Washington
Greenoaks and Altimeter, two Silicon Valley investment firms, have launched a legal challenge against South Korea over its treatment of Coupang, seeking compensation through a trade treaty and asking Washington to investigate whether Seoul has engaged in unfair trade practices. The dispute puts a Seattle-based company with most of its business in South Korea at the center of growing friction between two close allies.
Contents
- A Data Breach Dispute Reaches Washington
- Why the Breach Figures Matter
- Investigations Spread Across the Business
- Political Rhetoric Raises the Stakes
- What the Treaty Challenge Involves
- A Second Route Could Bring Trade Remedies
- Seoul Defends Its Authority to Enforce the Law
- Why the Dispute Is Drawing Political Attention
- Investment Losses and the Next Steps
- The Bottom Line
As of January 22, 2026, the firms have served a formal notice of intent to pursue arbitration under the U.S.-Korea Free Trade Agreement, known as KORUS. That notice begins a mandatory 90-day period for consultation before they may proceed to formal arbitration. They have also petitioned the Office of the U.S. Trade Representative, or USTR, to investigate South Korea under Section 301 of the Trade Act of 1974.
The investors allege that South Korean authorities used a consumer data breach to mount a discriminatory campaign against Coupang, helping domestic and Chinese competitors at the expense of a U.S. business. South Korean officials reject that accusation and say the scale of the information leak, together with the company's response, justified close scrutiny.
Coupang disclosed the breach in November 2025, reporting that personal information associated with approximately 33 million customers in South Korea was potentially compromised. The investors argue that a much smaller amount of information was actually downloaded. Their challenge now extends beyond privacy enforcement to tax investigations, police activity, commercial agreements and the treatment of company executives.
The unusual step of U.S. venture capital investors directly challenging a foreign government carries substantial financial stakes. Coupang's shares listed in New York have fallen approximately 27 percent since the November 30 disclosure, wiping out billions of dollars in market value. Greenoaks and Altimeter attribute their losses to the regulatory campaign they describe.
Why the Breach Figures Matter
Coupang's disclosure that approximately 33 million customers had potentially been affected triggered a strong public and political backlash in South Korea. Lawmakers called for tougher penalties and regulatory action, while senior officials demanded punitive measures against the company.
Greenoaks and Altimeter give a different account of the amount of information taken. Their legal filings contend that a threat actor based in China successfully downloaded data from only about 3,000 accounts. They also say the compromised information contained no financial details, government identification numbers or login credentials.
The dispute centers on the difference between information potentially exposed and information actually downloaded. Coupang's disclosure described a possible exposure involving approximately 33 million customers; the investors' filings describe downloads involving about 3,000 accounts. Those figures concern different stages of the incident, and the parties disagree over which should guide the government response.
The investors accuse senior officials in the ruling Democratic Party of Korea of ignoring the smaller download figure and publicly describing the incident as involving tens of millions of victims. They allege that officials used that description to stir public anger and justify a severe crackdown.
South Korea's position is that the leak was unprecedented and that Coupang's subsequent response was inadequate. The competing accounts therefore concern both the handling of personal information and whether the measures taken against the company were fair.
Investigations Spread Across the Business
Greenoaks and Altimeter describe a "whole-of-government" assault involving more than a dozen agencies. Their complaint is that authorities moved beyond investigating data security and began examining labor, financial, customs and tax matters that the investors say have little connection to the breach.
The filings describe a task force of 150 members within the National Tax Service and a police task force of 86 members dedicated solely to Coupang. The investors say the company has undergone hundreds of audits, inspections and raids, and has received more penalties than any other company in Korean history.
The firms also allege that the government pressured the national pension fund to sell its Coupang holdings and blocked commercial agreements unrelated to the data incident. Their argument is that the combined effect of these actions threatens the company's ability to operate, rather than simply requiring it to address the privacy breach.
These allegations are central to the treaty challenge. The investors are asking for scrutiny of the government's treatment of Coupang across its business, including whether that treatment discriminated against a U.S. investment and benefited competing companies.
Political Rhetoric Raises the Stakes
South Korean Prime Minister Kim Min-seok used language that the investors cite as evidence of the intensity of the campaign. He reportedly urged law enforcement to approach the Coupang case using the same determination applied to organized crime.
with the same determination used to wipe out mafias.
Other officials discussed the possibility of bankrupting Coupang, revoking its licenses or imposing record-breaking fines, according to the investors. Those statements feature in their argument that the government's response has become punitive beyond ordinary regulatory enforcement.
The firms also say officials referred several Coupang executives for criminal prosecution. They identify Chairman Bom Kim and Chief Administrative Officer Harold Rogers, both U.S. nationals, among those referred.
Neil Mehta, founder and managing partner of Greenoaks and a member of Coupang's board, framed the challenge as a defense of fair trade between allies. He said the investors took the legal action independently of Coupang.
"When a close ally penalizes a U.S. company for its success, it compromises a vital partnership and opens the door to competitors that do not play by the rules," said Neil Mehta, Founder and Managing Partner of Greenoaks.
Mehta's statement connects the company's treatment to the wider relationship between Washington and Seoul. The investors argue that predictable conditions for American businesses are part of that relationship, while South Korea maintains that it must enforce its laws.
What the Treaty Challenge Involves
The U.S.-Korea Free Trade Agreement provides the first route for the investors' challenge. Known as KORUS, the treaty is designed to protect U.S. investors and companies from discriminatory action by the South Korean government.
Greenoaks and Altimeter have served a notice of intent to pursue arbitration claims under that agreement. Arbitration is a process in which a dispute is submitted for a formal decision. Here, the investors are invoking treaty protections to challenge government conduct affecting their investment in Coupang.
The notice starts a mandatory 90-day "cooling-off" period. During that time, the investors and South Korean authorities can try to settle the dispute through consultation. If the period ends without a resolution, the firms may proceed to a formal arbitration hearing.
The investors seek financial compensation and an end to what they describe as targeted interference. They also want fair market conditions restored for U.S. businesses operating in South Korea. Their challenge links the alleged discrimination to the loss of value in their Coupang holdings.
The consultation period creates an opportunity for a settlement before the dispute reaches a hearing. The investors have asked South Korea to "engage in self-correction," placing the next immediate step with discussions between the parties.
A Second Route Could Bring Trade Remedies
The Office of the U.S. Trade Representative faces a separate request from the investors. Their petition asks it to investigate South Korea's conduct under Section 301 of the Trade Act of 1974, a U.S. law granting the agency broad authority to investigate and respond to unfair foreign trade practices.
A treaty arbitration claim seeks a decision on the investors' grievances. A Section 301 petition asks the U.S. government to consider a trade response. The investors are pursuing both routes because one concerns their investment and compensation, while the other could bring Washington directly into the dispute.
The petition asks USTR to consider appropriate remedies, potentially including tariffs or other sanctions against South Korean goods and services. A tariff is a tax on imports, so such a response could extend the economic consequences beyond Coupang and its shareholders.
USTR has up to 45 days to decide whether to open a formal investigation. As of January 22, no decision to launch one or impose a trade remedy is identified, and no calendar date is given for an arbitration hearing.
A U.S. investigation could turn a dispute about one company's treatment into a wider confrontation over trade. Tariffs and countermeasures would also risk complicating cooperation between the United States and South Korea on security and economic matters in the Indo-Pacific region.
Seoul Defends Its Authority to Enforce the Law
President Lee Jae Myung has rejected the discrimination accusation, saying South Korea is a sovereign country that will address the matter fairly according to law and principles. His response asserts the government's authority to deal with a major data incident within its own market.
Trade Minister Yeo Han-koo also denied that Coupang was being singled out after meetings with U.S. officials in Washington. He suggested that those officials held misunderstandings about the situation.
Yeo described the data leaks as "unprecedented" and said Coupang's inadequate response justified regulatory scrutiny. He argued that the American government would likely react with equal severity if a Korean company caused a similar leak of information on a large scale in the United States.
Seoul's defense puts the seriousness of the breach and the company's conduct at the center of the dispute. The investors instead focus on the breadth of the investigations, political statements and alleged unequal treatment. Resolving the disagreement requires addressing the government's stated enforcement reasons alongside the specific actions challenged by the firms.
Why the Dispute Is Drawing Political Attention
The Trump administration has previously expressed sensitivity about foreign government action against U.S. technology giants. The investors' petition arrives in that political setting, raising the prospect that Coupang's treatment could become part of a broader discussion in Washington about protecting American companies abroad.
Mick Mulvaney, a former acting White House chief of staff, recently wrote an opinion article arguing that South Korea was targeting Coupang. Brad Gerstner, the founder of Altimeter, has also been a prominent participant in discussions about U.S. economic policy.
The dispute is sensitive because the two countries are close allies. The investors say discriminatory treatment damages that partnership, while South Korean leaders defend the regulatory response as a lawful exercise of national authority.
The two legal routes could develop differently. Consultation under KORUS concerns the investors' claims against South Korea, while USTR's decision concerns whether the U.S. government should investigate the alleged trade practices. Neither process automatically determines the outcome of the other.
Investment Losses and the Next Steps
Greenoaks and its related entities hold more than $1.4 billion in Coupang shares, while Altimeter's position is valued at around $210 million. Mehta says South Korea's actions have cost Greenoaks hundreds of millions of dollars.
Coupang's approximately 27 percent share price decline since November 30 has erased billions of dollars in market capitalization, the total stock market value of the company. The investors argue that the hostile regulatory environment they describe caused those losses.
The firms want compensation, but their requested outcome also includes a return to predictable business conditions. They argue that uncertainty around Coupang threatens their existing investments and discourages future American investment in South Korea.
The main events and procedural periods are:
- November 2025: Coupang disclosed a data breach involving the potential compromise of information associated with approximately 33 million customers in South Korea.
- November 30, 2025: The disclosure date used to measure the subsequent decline of approximately 27 percent in Coupang's shares listed in New York.
- By January 22, 2026: Greenoaks and Altimeter had served notice of intent to pursue KORUS arbitration and petitioned USTR for a Section 301 investigation.
- Following the arbitration notice: A mandatory 90-day consultation period allows the parties to seek a resolution before formal arbitration.
- Following the Section 301 petition: USTR has up to 45 days to decide whether to launch an investigation.
Coupang continues to face a difficult operating environment in its main market while the investors await responses from Washington and Seoul. The immediate decisions concern consultation and a possible U.S. investigation. Their outcome will determine whether the dispute moves toward settlement, arbitration or a broader trade confrontation.
The Bottom Line
- Greenoaks and Altimeter allege that South Korea discriminated against Coupang after its November 2025 data breach.
- Coupang reported potential exposure affecting approximately 33 million customers; the investors say information from about 3,000 accounts was downloaded.
- The firms challenge investigations across more than a dozen government agencies, alongside alleged pressure on investments and commercial agreements.
- South Korean leaders deny discrimination and defend the response as justified by the leak and Coupang's handling of it.
- The KORUS notice begins a 90-day consultation period before possible formal arbitration.
- USTR has up to 45 days to decide whether to investigate under Section 301, a process that could lead to trade remedies.
- Coupang shares have fallen approximately 27 percent since November 30, and the investors seek compensation and predictable operating conditions.






