Cosmetics company data breach affects 340,000 clients

Cosmetics company Napoleon Perdis has been hit by a data breach, affecting almost 340,000 customers.

In an email to customers, the company said it was informed in June that a third party it had used to store customer records, Retail Express, had been hit by a cyber attack.

"In August 2026, Retail Express confirmed the unauthorised party had access between November 2025 and June 2026, affecting approximately 339,055 customer records," the email said.

"The incident has been contained and the system permanently shut down."

Napoleon Perdis said the breach affected its customers from pre-June 2025.

The information accessed included customer names, dates of birth, email addresses, phone numbers, postal addresses and purchase histories.

"This system did not hold your bank account or card details, or the password for your napoleonperdis.com account.

"Our current online store … was not affected."

Napoleon Perdis warned customers to be wary of scam calls or emails impersonating the company and advised them to monitor their bank transactions.

The Office of the Australian Information Commissioner has been notified.