The lawsuit alleges Coupang’s public statements failed to fully disclose the severity and timing of the breach and its impact on the business.