Napoleon Perdis

Napoleon Perdis lost names, birthdates, addresses, phone numbers, and purchase histories for roughly 339,055 customers through Retail Express, the vendor it paid to store them, where an unauthorized party had access from November 2025 to June 2026. Neither company has said how the intruder got in. Seven months of undetected access sat in a system the cosmetics brand did not run and could not watch. No card data was stored, the notice stresses. Only birthdates and home addresses, which no bank can reissue. The investigation into the incident was 40% faster than the time it took to discover the breach in the first place.