Napoleon Perdis Data Breach Exposes 340,000 Customer Records

Cosmetics company Napoleon Perdis has suffered a significant data breach, compromising the personal information of nearly 340,000 customers. The breach was discovered in June, and an investigation revealed that a third-party service used to store customer records, Retail Express, was targeted by a cyber attack.

Breaches Details

In an email to affected customers, Napoleon Perdis stated that Retail Express confirmed the unauthorized access occurred between November 2025 and June 2026, impacting approximately 339,055 customer records. The email said, "In August 2026, Retail Express confirmed the unauthorised party had access between November 2025 and June 2026, affecting approximately 339,055 customer records."

The breach is believed to have affected customers who made purchases prior to June 2025. The accessed information includes customer names, dates of birth, email addresses, phone numbers, postal addresses, and purchase histories.

Customer Protection

Napoleon Perdis assured customers that the incident has been contained and the system permanently shut down. The company also stated, "This system did not hold your bank account or card details, or the password for your napoleonperdis.com account." and "Our current online store … was not affected."

The company has warned customers to be cautious of scam calls or emails impersonating Napoleon Perdis and advised them to monitor their bank transactions. The Office of the Australian Information Commissioner has been notified of the breach.