Napoleon Perdis, the cosmetics brand launched in Sydney in 1995 by makeup artist Napoleon Perdis, has notified customers of a data breach impacting approximately 339,055 customer records. In an email to affected individuals, the company stated it was informed in June that Retail Express, the third party used to store customer records, had suffered a cyber attack.
According to the company, the unauthorised party had access to the system between November 2025 and June 2026. The incident has been contained and the system permanently shut down. The breach affects customers from before June 2025.
The information accessed includes customer names, dates of birth, email addresses, phone numbers, postal addresses, and purchase histories. Napoleon Perdis emphasised that the compromised system did not hold bank account or card details, nor account passwords for its online store. The company confirmed its current online store was not affected.
Customers have been advised to remain vigilant against scam calls or emails impersonating the company and to monitor their bank transactions. The Office of the Australian Information Commissioner has been notified of the breach.