Nick Scali Limited's 13 August 2026 ASX release says it is investigating a security incident and elected to take certain systems offline.

The company said it was bringing those systems back online, continuing to complete sales orders and deliveries, with slower-than-normal customer response times.

At the time of the release, Nick Scali said it did not have any evidence of unauthorised access to customer data. It notified the Australian Cyber Security Centre and the Australian Federal Police, and said further updates would follow as appropriate.

The Sydney Morning Herald (13 Aug) reported that chief executive Anthony Scali said the incident happened 'about mid-last week' and that staff were referring to manual records to get in touch with customers whose orders had been affected.

UPDATE (22 Oct 2026): in an email to customers reported by the NZ Herald on 10 September, Nick Scali said details on sales orders, including name, email address, delivery address and phone number, were affected, and that no credit card details are recorded on sales orders because card payments go through a third-party provider.

In its 21 October 2026 ASX trading update, Nick Scali said the incident left its ERP systems unavailable for about three weeks, with stores processing sales orders manually, and that about $980,000 of direct consultant and legal costs will be reported outside underlying net profit.

Capital Brief, citing The Australian, reported that the attackers claimed to have customer details and demanded an unspecified ransom, and that Nick Scali hired an intermediary to negotiate; Nick Scali has not confirmed this in its ASX releases.

CORRECTION (22 Oct 2026): this card earlier said customer-data access was not verified; Nick Scali has since told customers that sales-order details were affected (source: NZ Herald, 10 Sep 2026).