Overview

• Victoria’s Secret took down its website and some in-store services on May 25 after detecting a security incident, and the outage continues into its fifth day.
• The company activated its incident response protocols and brought in third-party experts to diagnose and remediate the issue.
• Digital sales made up roughly one-third of Victoria’s Secret’s 2024 revenue, and its shares dropped more than 6% on May 28 amid investor concerns.
• Physical Victoria’s Secret and PINK stores remain open while the retailer fulfills orders placed before May 26 and suspends online-related in-store services like returns.
• Security analysts note the breach echoes a recent wave of cyberattacks on major retailers, underlining growing vulnerabilities in retail digital infrastructure.