Update on security incident – 1 September 2026 We are currently investigating a security incident that has impacted Nick Scali resulting in unauthorised access to some of our systems. Based on our investigations to date, we have identified that some of our systems have been impacted. The key types of customer information held on the impacted systems are the details on your sales order, including name, email address, delivery address and phone number. No credit card details are recorded on sales orders. All credit card payments are processed through a third-party provider. While we have no evidence that any customer information has been misused, we encourage customers to:

1. Remain vigilant when receiving unexpected emails, text messages or phone calls, particularly where the sender or caller claims to be from Nick Scali, your bank or a government agency. Never share passwords, banking details or other sensitive information unless completely confident about who is requesting it.

2. Enable multi-factor authentication (such as an authentication application) for personal email and online accounts, where available.

3. Stay informed on the latest scams by visiting Scamwatch and the National Cyber Security Centre.

4. Access additional resources through IDCare’s Learning Centre and the Office of the Privacy Commissioner. We sincerely apologise for this incident and any concern it may cause. Supporting our customers is our priority. We are in the process of contacting customers directly and will provide up-to-date information through this dedicated webpage.

Please be assured that supporting you is our priority. If you have any concerns, please email us at response@nickscali.co.nz or phone us on 09 873 5524.