Napoleon Perdis customers caught in breach affecting almost 340,000 records
A cyber attack on cosmetics brand Napoleon Perdis's data supplier exposed almost 340,000 customer records.
Australian cosmetics company Napoleon Perdis said a cyber attack hit its third-party data storage supplier, Retail Express. The breach exposed customer records.
The breach lasted seven months, from November 2025 until June 2026. The supplier then shut the system down.
Stolen data included names, birth dates, email addresses, phone numbers, postal addresses, and purchase histories. The company said bank card details and passwords were not stored on the hacked system.
Its current online store was not affected. Napoleon Perdis warned customers to watch for scam calls or emails pretending to be from the company.
Customers should monitor their bank accounts too. The Office of the Australian Information Commissioner was told about the incident.
- 339,055
- Records affected
- 7 months
- Breach duration
- Retail Express
- Data supplier
Why it mattersIf you've shopped with Napoleon Perdis, your personal details are at risk. Scammers can use them for fraud, identity theft, or phishing attacks.
AustraliaHundreds of thousands of Australian customers' personal information has been exposed, putting them at risk of fraud and identity theft targeting.
✓ Claims checked against the source. checked 56 min ago
Open this story in InSnip →
