Skip to content
Napoleon Perdis Cyber Attack Exposes Data of 340,000 Customers

Napoleon Perdis Cyber Attack Exposes Data of 340,000 Customers

First seen 17 Oct 2026, 20:14 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 17, 2026 at 20:48 UTC
  • •Data breach affects approximately 340,000 customers of Napoleon Perdis.
  • •Compromised data includes personal details but not banking information.
  • •The breach was linked to a third-party provider, Retail Express.

Napoleon Perdis, an Australian cosmetics brand, experienced a significant data breach affecting nearly 340,000 customers. The breach, linked to a third-party provider, Retail Express, compromised personal information such as names, dates of birth, email addresses, phone numbers, postal addresses, and purchase histories. The unauthorized access reportedly occurred between November 2025 and June 2026, impacting records of customers who made purchases before June 2025. However, banking information and passwords were not compromised. The company has assured that its current online store remains secure and that the affected system has been permanently shut down. Customers are advised to be vigilant against potential scams following the breach, and the Office of the Australian Information Commissioner has been notified.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-06-01
Retail Express notified Napoleon Perdis
Retail Express informed Napoleon Perdis about the cyber attack affecting customer records.
Abc.Au
2026-08-01
Retail Express confirms unauthorized access
Retail Express confirmed that unauthorized access to customer records occurred between November 2025 and June 2026.
News24.Au
2026-10-17
Breach disclosed to customers
Napoleon Perdis disclosed the breach to affected customers, advising them to monitor for scams.
Abc.Au

More articles in this cluster (2)

Following this threat?

Track Napoleon Perdis in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 3

Common questions

What personal information was compromised?
The breach exposed names, dates of birth, email addresses, phone numbers, postal addresses, and purchase histories.
Is my banking information safe?
Yes, the company confirmed that banking information and passwords were not compromised in the breach.
What should affected customers do?
Customers should monitor their bank transactions and be wary of unsolicited communications that may be scams.