Coupang's Two Faces: American Company When It Counts, Korean When It Doesn't

The Legal Identity Switch

Coupang is playing both sides of the Pacific with a legal identity that changes depending on which courtroom or capitol building it’s standing in. In a New York federal court, the e-commerce giant argues it’s a Korean company — one that should face trial in Seoul, not Manhattan. In Washington, it’s a major American employer and export engine deserving of political access.

The contradiction came sharply into focus during a pre-trial hearing at the Eastern District of New York on April 1, where Judge Anne M. Donnelly pressed both sides on why the case belongs in her court at all. Her questions cut straight to Coupang’s central evasion: if the data breach happened in Korea and affected Korean consumers, why are American plaintiffs suing in New York?

The answer, from Coupang’s side, is clean and convenient. Kirkland & Ellis, the firm representing the company, argued that the Korean subsidiary is a separate legal entity from Coupang Inc, the Delaware-registered parent listed on the New York Stock Exchange. The breach occurred on a Korean platform, affecting Korean users. The argument was simple: this is a Korean matter for Korean courts.

But separating a Delaware parent from its Korean operating subsidiary is a legal exercise that only works if you cherry-pick which corporate relationships count. Coupang Inc directs strategy, appoints the Korean subsidiary’s board, and consolidates the subsidiary’s financial results on its American parent’s books. The two entities are treated as one for accounting purposes and investor disclosures, yet Coupang asks a court to treat them as strangers when it comes to liability.

The Reverse Argument

Plaintiff attorneys immediately flipped the script. Coupang Inc is a Delaware corporation trading on US exchanges. Its board — including chairman Kim Beom-soo — exercises control over the Korean subsidiary. And critically, Coupang Inc reported the data breach to the Securities and Exchange Commission, acknowledging the incident through the formal disclosure channels required of publicly traded American companies.

The logic is hard to dismiss. If a US-listed parent company tells Wall Street about a security failure at its Korean operation, then US courts arguably have a legitimate interest in hearing whether that parent fulfilled its duties to American investors and residents who may have been affected. SEC filings are not internal memoranda — they are public representations made to American regulators and shareholders. Once Coupang chose to disclose the breach under US securities law, it stepped into the American legal ecosystem whether it liked it or not.

Two New York-area customers signed on as lead plaintiffs. Roughly 7,800 people have expressed interest in joining what seeks roughly $5 million in damages. The numbers suggest this could grow into a significant precedent for how cross-border data breaches get handled when a Korean company is US-listed. What started as a dispute over jurisdiction is quietly becoming a test of whether American courts will look through corporate structures to hold parent companies accountable for the data practices of their foreign subsidiaries.

The Lobbying Record

Meanwhile, Coupang’s American political presence tells a different story. In the first quarter alone, the company spent $1.09 million on lobbying — money directed at the White House, the Vice President’s office, Congress, the Commerce Department, and the Office of the US Trade Representative. The pitch to American lawmakers has centered on job creation and trade expansion, framing Coupang as an American business that happens to operate in Korea.

This is the same playbook other tech companies have used for years: lean into your American identity when you want government favors, retreat into your foreign identity when you want to avoid government scrutiny. Coupang isn’t unique in this — but the clarity of the switch here, visible in a single court filing, makes it easier to see. The company has built a fulfillment network across the United States, hired American workers, and cultivated relationships with policymakers who want to see South Korea — a key security ally — integrated deeper into American supply chains. That political capital is real, and Coupang is investing in it systematically.

The second-order effect of this dual positioning is worth watching. When companies can claim American identity for lobbying purposes but Korean identity for liability purposes, they effectively opt into the benefits of US incorporation without accepting its burdens. This creates a perverse incentive structure: the more successful a foreign tech company becomes in America, the more it profits from US infrastructure and consumer markets, yet the less it can be held accountable in American courts for harms that flow through that same infrastructure.

Why This Matters Beyond Korea

The jurisdiction question isn’t just procedural. If Judge Donnelly rules that the Eastern District of New York lacks authority, the case dies without ever addressing whether Coupang violated its duty to protect user data. That’s a powerful incentive for companies to structure their legal arguments the way Coupang has — and it sends a message to every Korean and Asian tech firm with a US listing that a similar defense is available.

But there’s a geopolitical layer too. South Korea and the United States are deepening their trade and security partnership. A US court dismissing this case on jurisdictional grounds could signal that American judges are reluctant to pull strings through to Asian tech subsidiaries — a reluctance that may reflect diplomatic caution as much as legal principle. Alternatively, it could embolden Korean firms to argue the same defense in future cases, gradually building a shield of corporate separation around Asian tech giants operating in America.

The reverse outcome carries its own weight. If the court asserts jurisdiction, it sets a precedent that Korean — and by extension, Chinese and other Asian — companies with US listings can be held accountable in American courts for data failures overseas. That would reshape how these companies approach both compliance and lobbying. It would also force a reckoning with the broader question of whether American securities law disclosures create jurisdictional hooks that transcend traditional corporate boundaries. Companies that have grown accustomed to treating their international subsidiaries as legally distinct from their American parent would need to rethink how they structure governance, reporting, and risk management.

What Happens Next

Judge Donnelly has asked both sides to file additional briefs by May 6. She’s clearly thinking about this seriously — the questions she raised during the hearing suggest she’s not prepared to take the easy path of either dismissing or asserting jurisdiction outright. The extra briefing period gives her room to work through the nuances of corporate separateness, SEC disclosure obligations, and the extent to which a Delaware parent can be said to direct the data practices of a Korean subsidiary.

For Coupang, the risk is real. Lose the jurisdiction fight and the case moves to substantive proceedings, where the company’s SEC disclosures become evidence against it. Win and the plaintiffs must restart in Korea, where consumer protection standards and class-action mechanisms work very differently — and where a Korean court may be more sympathetic to a domestic champion industry.

The broader lesson extends well beyond this single case. When tech companies operate across borders, they get to choose which border belongs to them — until a judge decides otherwise. The outcome here will shape how firmly American courts draw the line between corporate flexibility and corporate accountability, and whether the increasingly common pattern of jurisdictional opportunism will continue unchecked or finally meet resistance.