Nick Scali Reports Costs After August Cyber Attack
The furniture retailer incurred nearly $1 million in fees to address a security incident that disrupted operations.
Updated on Oct. 21, 2026 in Cybersecurity
Live Poll
Do you trust retail companies to effectively secure your personal data after a cyber security incident?
Nick Scali spent $980,000 on consultant and legal fees following a cyber attack in August 2026. The incident forced company systems to remain offline for three weeks.
Why it matters
The security breach forced the retailer to pivot to manual order processing, contributing to significant declines in local sales and traffic. The company is now working to manage the financial fallout from the attack while navigating a challenging retail environment.
The retailer spent $980,000 on consultants and legal experts after cyber criminals obtained customer data. Systems remained offline for 3 weeks, during which staff were forced to process all sales orders manually.
The players
Nick Scali
Nick Scali is an international furniture retailer that operates stores across Australia, New Zealand, and the United Kingdom.
The details
While Australian and New Zealand operations saw a 15% drop in written sales orders and a 10% decline in store traffic during the first quarter of 2026, the company reported a 14% increase in UK like-for-like orders. Nick Scali utilized an intermediary to negotiate with the perpetrators after they allegedly accessed private customer information.
Timeline
August 2026: Nick Scali suffered a cyber attack.
Q1 2026: Sales orders and store traffic fell in Australia and New Zealand.
The Tech Race
This incident reflects the growing trend of cyber criminals targeting retail databases for ransom. It highlights the vulnerability of legacy inventory systems to sophisticated digital extortion attempts that disrupt global operations.
Customers who shopped with the retailer during the impacted period may have had their personal details exposed to unauthorized parties. The company's focus on managing the fallout from this breach may lead to heightened security protocols affecting future online order processing.
The takeaway
Retailers continue to face significant financial risks from cyber attacks that extend beyond the initial ransom demands to include long-term operational costs. Companies should prioritize robust system redundancies to ensure they can maintain manual or alternative operations during prolonged outages.
Further reading
For broader context on how businesses are managing digital threats, see the latest Cybersecurity news.
Live Poll
Do you trust retail companies to effectively secure your personal data after a cyber security incident?
