Nick Scali Security Breach Exposes Customer Data in New Zealand
Furniture retailer Nick Scali has confirmed a security breach affecting the personal details of its New Zealand customers. The incident, which occurred last month, compromised data from sales orders, including names, email addresses, delivery addresses, and phone numbers.
In an email sent to customers on September 10, 2026, the company clarified that no credit card information was exposed, as payments are processed through a third-party provider. While financial data remains secure, Nick Scali warned customers to stay vigilant against potential phishing attempts, particularly from fraudulent communications posing as the company, banks, or government agencies.
The breach highlights ongoing risks to consumer data in retail cybersecurity, though the full scope of the incident and its impact on affected individuals are still under review.
Nick Scali Limited cybersecurity rating report: https://www.rankiteo.com/company/nick-scali-furniture
"id": "NIC1789115974",
"linkid": "nick-scali-furniture",
"type": "Breach",
"date": "8/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'New Zealand customers',
'industry': 'Furniture',
'location': 'New Zealand',
'name': 'Nick Scali',
'type': 'Retailer'}],
'customer_advisories': 'Warning about potential phishing attempts from '
'fraudulent communications posing as the company, '
'banks, or government agencies',
'data_breach': {'personally_identifiable_information': 'Yes (names, email '
'addresses, delivery '
'addresses, phone '
'numbers)',
'sensitivity_of_data': 'Moderate (personally identifiable '
'information but no financial data)',
'type_of_data_compromised': 'Personal details (names, email '
'addresses, delivery addresses, '
'phone numbers)'},
'date_publicly_disclosed': '2026-09-10',
'description': 'Furniture retailer Nick Scali has confirmed a security breach '
'affecting the personal details of its New Zealand customers. '
'The incident compromised data from sales orders, including '
'names, email addresses, delivery addresses, and phone '
'numbers. The company clarified that no credit card '
'information was exposed, as payments are processed through a '
'third-party provider. Customers were warned to stay vigilant '
'against potential phishing attempts.',
'impact': {'brand_reputation_impact': 'Potential impact due to phishing risks '
'and data exposure',
'data_compromised': 'Personal details of New Zealand customers, '
'including names, email addresses, delivery '
'addresses, and phone numbers',
'identity_theft_risk': 'Increased risk due to exposure of personal '
'details',
'payment_information_risk': 'None (credit card information was not '
'exposed)'},
'investigation_status': 'Under review',
'references': [{'date_accessed': '2026-09-10',
'source': 'Company advisory email'}],
'response': {'communication_strategy': 'Email sent to customers on September '
'10, 2026, warning about phishing '
'risks'},
'title': 'Nick Scali Security Breach Exposes Customer Data in New Zealand',
'type': 'Data Breach'}