Victoria's Secret suffers multi-day website shutdown after security incident
Learn More
The lingerie and apparel retailer Victoria's Secret & Co. is battling a security incident that forced the company to shut down its website and suspend critical online operations for multiple consecutive days beginning around Memorial Day weekend 2025.
The incident began on or around May 25, 2025 and has resulted in a complete website blackout lasting at least three days - one of the most prolonged outages experienced by a major retail company of this scale.
The company activated response protocols and engaged third-party cybersecurity experts to address what it describes as a "security incident." Victoria's Secret has halted some office operations and instructed employees to avoid using company technology, with some staff locked out of email accounts as passwords stopped functioning. This suggests the incident may have penetrated multiple layers of the company's IT infrastructure, affecting both customer-facing systems and internal corporate networks.
No details are disclosed about the nature of the attack, any exposed data or number of affected individuals.
The prolonged outage spooked investors, sending Victoria's Secret stock price down nearly 7% following news of the incident.
Victoria's Secret has assured customers that its physical Victoria's Secret and PINK stores remain open and operational, allowing continued in-person shopping while digital operations are restored. The company stated it is "working around the clock to fully restore operations" and has maintained that customer safety and data security remain top priorities throughout the incident response process.
Update - as of 3rd of June 2025, Victoria's Secret has delayed its first quarter 2025 earnings release because of the restoration efforts after the security incident.
