Napoleon Perdis hit by massive cyber attack as almost 340000 customers have personal ...

An iconic Australian beauty brand worn by stars including Lady Gaga and Succession actress Sarah Snook has been hit by a major cyber attack, exposing the personal information of almost 340,000 customers.

Napoleon Perdis has warned customers to watch for scams after a cyber attack exposed the personal information of almost 340,000 people.

The Australian cosmetics brand confirmed names, dates of birth, details and purchase histories were compromised in a breach involving former customer records.

Customers have been urged to remain vigilant against fraudulent calls and emails impersonating the company and to monitor their bank transactions.

Banking information, payment card details and online account passwords were not compromised, the company said.

Retail Express, a former third-party customer records provider, was targeted in the attack.

"In August 2026, Retail Express confirmed the unauthorised party had access between November 2025 and June 2026, affecting approximately 339,055 customer records," Napoleon Perdis said in an email to customers, as reported by the ABC.

The affected records belonged to customers from before June 2025.

Napoleon Perdis said its current online store was unaffected, while the compromised system had been permanently shut down.

"The incident has been contained and the system permanently shut down," the company said in the email reported by the ABC.

The Office of the Australian Information Commissioner has been notified of the breach.

Founded in Sydney in 1995, Napoleon Perdis has attracted celebrity fans including Lady Gaga and Succession star Sarah Snook, who wore the brand's makeup at the 2013 AACTA Awards.

News24.com.au has contacted Napoleon Perdis and the Australian Competition and Consumer Commission (ACCC) for .

The National Anti-Scam Centre has warned Australians to remain vigilant following the Napoleon Perdis data breach, with scammers potentially using the incident to target customers.

"Following any cyber incident, Australians should be wary of any unsolicited ," a spokesperson told News24.com.au.

"Scammers may use this cyber incident as an opportunity to make unsolicited ."

The spokesperson urged affected customers not to respond to unexpected communications the breach.

Australians are encouraged to report cybercrime through ReportCyber at cyber.gov.au, while anyone who believes they have been scammed should immediately their bank and report the incident to Scamwatch.