CSIDB logo
Incident

Victoria's Secret

Incident posture

Attack window
May 2025
Location
United States of America
Status
Unknown
CIA posture
Available to members
Updated
2026-02-16 12:21

Linked entities

Victim
Victoria's Secret
Threat actors
0 actors
Sources
2 sources

Timeline

Occurred
May 2025
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

Victoria's Secret experienced a security incident prompting the company to take its website offline and disable some in-store services as a precautionary measure. This caused disruptions to online access and order processing, alongside a reported stock price decline. The retailer engaged third-party experts and activated its incident response protocols, working to fully restore operations securely while keeping physical stores open for customers.

Motives

Detailed motive labels are available to members.

0 motives

TTPs

Detailed technique labels are available to members.

2 techniques

Description

Victoria's Secret experienced disruptions to its online operations beginning on Monday, May 26, 2025, as users reported being unable to access the company's website. The company subsequently confirmed it was addressing a cybersecurity incident. On Wednesday, May 28, 2025, Victoria's Secret publicly acknowledged the situation via a statement posted on its own website, informing customers about the security incident and the steps being taken. The company stated it immediately enacted its response protocols upon identifying the issue. As a precautionary measure, Victoria's Secret took its primary website offline and also disabled some in-store services to contain potential risks associated with the incident. The company engaged third-party cybersecurity experts to assist in managing and resolving the situation. A spokesperson for Victoria's Secret confirmed these actions in response to media inquiries but declined to provide their name or describe the specific nature of the security incident.

The precautionary shutdown of the Victoria's Secret website resulted in significant ongoing disruption to online orders and customer access. Despite the online outage and partial in-store service limitations, the company emphasized that its physical Victoria's Secret and PINK retail locations remained open for business. Victoria's Secret stated its team was working continuously to fully restore normal operations securely and as quickly as possible. The company expressed appreciation for customer patience while restoration efforts were underway. The announcement of the security incident had a notable financial impact, with Victoria's Secret's stock price closing down seven percent on the news. The primary focus remained on resolving the incident and bringing the website and affected in-store systems back online safely.

Sources

Sources available to members: 2 sources.

CSIDB