The Field Briefing — Red Flag Cyber research desk

Napoleon Perdis breach: about 339,000 customer records accessed

Napoleon Perdis says an unauthorised party had access to customer records held by its third-party provider Retail Express from November 2025 to June 2026 — about 339,055 records, including names, dates of birth and contact details.

Who is affected: Customers from before June 2025. The information accessed includes names, dates of birth, email addresses, phone numbers, postal addresses and purchase histories. The company says the system did not hold bank account or card details, or passwords for its online store.

The one action that matters: Treat any message or call that cites your purchases or this breach and asks for passwords, codes or payment details as suspect, and contact the company through its official site or stores rather than any link or number in the message.

Full report: https://red-flag-cyber-site.andrewdpeat.workers.dev/news/napoleon-perdis

More Rewards breach: grocery loyalty members' details accessed

More Rewards, the Save-On-Foods loyalty program in Western Canada, confirmed on October 16 that members' names and, where provided, addresses, phone numbers, email addresses and dates of birth were accessed.

The company says passwords, credit card data and transaction history were not accessed. It says it will never contact members for passwords, verification codes, banking or payment card information, a Social Insurance Number or security question answers — if a message asks for those, verify it through contact information you already know is legitimate.

Full report: https://red-flag-cyber-site.andrewdpeat.workers.dev/news/more-rewards

California student breach: millions of students' data copied from testing contractor ETS

California's education department says a compromised login was used to copy student files from ETS's file-transfer site, covering all students enrolled in the three previous school years.

If a notice letter arrives, keep it: it carries the enrollment details for two years of free Experian IdentityWorks identity-protection services, and enrollment closes on March 19, 2027. Notifications run through early November.

Full report: https://red-flag-cyber-site.andrewdpeat.workers.dev/news/california-students-ets

Stay ready: get the free Spot the Phish checklist and follow new reports at https://red-flag-cyber-site.andrewdpeat.workers.dev/

— Red Flag Cyber research desk