Victoria’s Secret Cyber Attack Catches Retail Behemoth With Panties Down
The retail giant’s website was offline for four days after the cyber incident.
June 7 – Victoria’s Secret (NYSE: VSCO.N) disclosed on Tuesday, June 3, 2025, that its website was taken offline for four days last week due to a cybersecurity incident. The Victoria’s Secret cyber attack also impacted internal systems, as well as the company’s earnings call.
According to a press release from June 3, the company “detected a security incident involving its information technology systems” on May 24, 2025. The company then engaged third-party experts and enacted “response protocols to attempt to contain and eradicate unauthorized network access.”
The company took precautions by temporarily shutting down corporate IT systems. They also took down their e-commerce website on May 26. The company was able to restore the website on May 29, although corporate IT systems remained down.
Earnings Call Postponed as a Result of Victoria’s Secret Cyber Attack
As a result of the Victoria’s Secret cyber attack, the company could not to access its systems for its full earnings report and postponed its scheduled earnings call. Although the outage did not affect that earnings report, Dana Telsey of Telsey Advisory believes that this breach could have a significant impact on the company’s revenue this quarter, as digital sales made up approximately one third of the company’s sales last year, the analyst told Yahoo! Finance.
According to a Victoria’s Secret statement, “The restoration process has prevented employees from accessing certain systems and information needed to support the company’s release of its financial results.”
“The company immediately enacted its response protocols to attempt to contain and eradicate unauthorized network access, and third-party experts were engaged,” the statement continued.
The company did not respond to a request for comment; however, shutting down its website in response to the breach “suggest it’s been fending off a ransomware attack,” according to PCMag.
The company, in its statement, warned of risks to its “ability to maintain the security of customer, associate, third-party and company information.”
About The Author
