PIPC

South Korea fined Coupang $409 million after a former employee used an unrevoked signing key to harvest 37.56 million customer records over seven months. The PIPC found 'deficiencies in basic safety management' — not sophisticated hacking. With total incident costs exceeding $1.6 billion and the EU AI Act enforcement starting August 2, 2026, this is the most detailed real-world case study of what AI governance failure actually costs. Enterprise AI governance readiness assessment and cost-of-inaction calculator inside.