Victoria’s Secret Website Goes Dark After Security Breach

NEW YORK, May 29, 2025 – Victoria’s Secret, the renowned lingerie and beauty retailer, has taken its U.S. website offline and suspended select in-store services following a significant "security incident," the company confirmed Wednesday. The outage, which began Monday, has disrupted online operations and sparked widespread speculation about a potential data breach, leaving shoppers frustrated and investors rattled.

The company issued a statement on its website, saying, “Valued customer, we identified and are taking steps to address a security incident. We have taken down our website and some in-store services as a precaution. Our team is working around the clock to fully restore operations.” The statement emphasized that Victoria’s Secret and PINK physical stores remain open, but it provided no timeline for restoring online services or specifics about the incident.

The prolonged outage, now spanning three days, is highly unusual for a retailer of Victoria’s Secret’s stature, which relies on online sales for approximately one-third of its $6 billion annual revenue. The company’s stock (NYSE: VSCO) plummeted nearly 7% on Wednesday, reflecting investor concerns about the financial impact of the disruption, especially in the wake of Memorial Day sales.

Cybersecurity experts suggest the incident may involve a sophisticated attack, potentially ransomware or data exfiltration, given the extent of the operational disruption. “The extended duration of the outage suggests either extensive system compromise requiring comprehensive rebuilding, or ongoing negotiations in a potential ransomware scenario,” noted security analysts, though Victoria’s Secret has not confirmed any ransom demands. Reports also indicate that employees have been locked out of email accounts and internal systems, further hinting at a significant breach.

A Victoria’s Secret spokesperson told Newsweek that the company “immediately enacted response protocols” and has engaged third-party cybersecurity experts to investigate and remediate the issue. However, the lack of transparency about the nature of the incident—whether it involves compromised customer data or a cyberattack—has fueled speculation.

The incident comes amid a wave of cyberattacks targeting major retailers. In the UK, Marks & Spencer recently reported a £300 million ($403 million) hit to operating profits due to a cyberattack attributed to the hacking group DragonForce. Security experts warn that retailers like Victoria’s Secret are high-value targets due to their extensive digital infrastructure and sensitive customer data, including names, addresses, and payment details. “Retailers have become high-value targets for cybercriminals, and recent breaches at Dior, M&S, Harrods, and Co-Op in the last month alone make it clear that this is more than just a passing trend,” said Ryan Sherstobitoff, SVP at SecurityScorecard.

On social media, customers expressed frustration over the outage, particularly as it coincided with promotional sales. “Victoria’s Secret website down since last night and I couldn’t use a coupon that expired yesterday because of it,” one user posted on X. Another called the timing “criminal” during a sale period.

The outage also disrupted in-store operations, with some employees reporting an inability to look up rewards members or process shipments. “Systems are down everywhere,” one worker posted on X, highlighting the broader impact on the company’s operations.

Victoria’s Secret, which operates 1,380 stores across 70 countries and employs over 30,000 associates, has been navigating a challenging period. The company recently appointed Hillary Super as CEO to revitalize demand and staged a comeback fashion show in 2024 after a years-long hiatus. The security incident represents a fresh setback as the brand seeks to regain its footing.

Cybersecurity experts underscore the growing sophistication of attacks, often leveraging artificial intelligence, as noted by Richard Blech, CEO of XSOC Corp. “Hackers are getting increasingly sophisticated,” Blech told CNN, warning that the Victoria’s Secret incident could mirror the costly disruption faced by Marks & Spencer.

As the investigation continues, Victoria’s Secret faces mounting pressure to restore its digital operations and reassure customers about the safety of their data. The company has not yet responded to requests for additional comment, and consumers are advised to monitor their accounts for suspicious activity until more details emerge.

17GEN4.com

17GEN4 News