Cyber Incident Victim: Victoria's Secret
Date:
May 2025
Location:
United States of America
Summary
Victoria's Secret experienced a security incident prompting the company to take its website offline and disable some in-store services as a precautionary measure. This caused disruptions to online access and order processing, alongside a reported stock price decline. The retailer engaged third-party experts and activated its incident response protocols, working to fully restore operations securely while keeping physical stores open for customers.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 2 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
Victoria's Secret experienced disruptions to its online operations beginning on Monday, May 26, 2025, as users reported being unable to access the company's website. The company subsequently confirmed it was addressing a cybersecurity incident. On Wednesday, May 28, 2025, Victoria's Secret publicly acknowledged the situation via a statement posted on its own website, informing customers about the security incident and the steps being taken. The company stated it immediately enacted its response protocols upon identifying the issue. As a precautionary measure, Victoria's Secret took its primary website offline and also disabled some in-store services to contain potential risks associated with the incident. The company engaged third-party cybersecurity experts to assist in managing and resolving the situation. A spokesperson for Victoria's Secret confirmed these actions in response to media inquiries but declined to provide their name or describe the specific nature of the security incident.
The precautionary shutdown of the Victoria's Secret website resulted in significant ongoing disruption to online orders and customer access. Despite the online outage and partial in-store service limitations, the company emphasized that its physical Victoria's Secret and PINK retail locations remained open for business. Victoria's Secret stated its team was working continuously to fully restore normal operations securely and as quickly as possible. The company expressed appreciation for customer patience while restoration efforts were underway. The announcement of the security incident had a notable financial impact, with Victoria's Secret's stock price closing down seven percent on the news. The primary focus remained on resolving the incident and bringing the website and affected in-store systems back online safely.