Napoleon Perdis breach via Retail Express exposes 339,055 customers

Napoleon Perdis notified customers on October 17, 2026 that it was informed in June 2026 that Retail Express, the third-party vendor that stored its customer records, had suffered a cyber attack. An unauthorized party had access to the system between November 2025 and June 2026, covering customer records from before June 2025, affecting about 339,055 customers. The information accessed includes names, dates of birth, email addresses, phone numbers, postal addresses, and purchase histories. Neither company has stated how the intruder got in.

The company says the incident has been contained and the system has been permanently shut down. The compromised system did not hold bank account or card details, nor passwords for its online store, and its current online store was not affected. The Office of the Australian Information Commissioner has been notified, and customers have been advised to remain vigilant against scam calls or emails impersonating the company.

Sources: Zot News; The Hacker in a Hoodie Index