The Victoria Secret security incident has sent shockwaves through the retail world this week, as the iconic lingerie brand’s website and some in-store services went dark following a major, still-unfolding cybersecurity event. As of May 29, 2025, Victoria’s Secret’s online presence remains largely offline for a third consecutive day, and the company is working around the clock to restore normal operations. Here’s the latest, verified information on the Victoria Secret security incident, what it means for customers, and how the company is responding.
Table of Contents
What Happened: The Victoria Secret Security Incident Unfolds
On Wednesday, May 28, Victoria’s Secret abruptly suspended most functionality of its website and certain in-store services, citing an unspecified security incident. Customers who tried to access the site were greeted by a stark message: the company had identified a security issue and was taking immediate steps to address it. As a precaution, both the website and some in-store digital services were taken offline.
Despite this disruption, all Victoria’s Secret and PINK physical stores have remained open, allowing shoppers to continue making purchases in person. However, the online outage is significant—digital sales accounted for roughly $2 billion in 2024, about a third of the company’s annual revenue. The incident has rattled investors, sending Victoria’s Secret shares tumbling nearly 7% in a single day.
How Victoria’s Secret Is Responding
Victoria’s Secret has activated its emergency response protocols and engaged third-party cybersecurity experts to investigate and resolve the security incident. The company has not yet disclosed the nature of the breach, whether customer data has been compromised, or if law enforcement is involved. However, the swift and sweeping action—taking down the entire website and disabling some in-store services—underscores the seriousness of the threat.
A spokesperson emphasized that the company is working “quickly and securely” to restore all operations. The message to customers is clear: your security is our top priority, and we are taking every precaution to protect your information and restore service as soon as possible.
Key Points at a Glance
- Website and some in-store services offline since at least Monday, May 26
- Physical stores (Victoria’s Secret and PINK) remain open and operational
- No confirmation yet on the type of security incident or data breach
- Third-party cybersecurity experts are actively involved
- Company shares dropped nearly 7% following the news
The Broader Context: Retailers Under Cyber Siege
The Victoria Secret security incident is not an isolated event. In recent months, several major retailers—especially in the UK—have faced similar cyberattacks. Marks & Spencer, Harrods, and the Co-op have all suffered significant disruptions, with some incidents resulting in the theft of customer data and hundreds of millions in losses. Experts warn that sophisticated hacker groups, emboldened by artificial intelligence and targeting unprepared retailers, are now turning their attention to the US market.
The timing of the Victoria Secret security incident is also noteworthy. Cybercriminals often strike during public holidays, such as the recent US Memorial Day, when IT departments may be understaffed and less able to mount a rapid defense. This trend highlights the growing need for robust, always-on cybersecurity strategies in the retail sector.
What Does This Mean for Victoria’s Secret Shoppers?
For now, customers can continue shopping at physical Victoria’s Secret and PINK stores without interruption. However, online shoppers will have to wait until the company restores its website and digital services. There is currently no indication that in-store payment systems have been affected, and the company has not reported any confirmed data breaches involving customer information.
If you have an online account with Victoria’s Secret, it’s wise to monitor your email and account activity for any unusual behavior. While the company has not advised customers to take specific action, staying vigilant is always a good idea in the wake of a major security incident.
What Should Shoppers Do?
- Monitor your Victoria’s Secret account and email for updates
- Watch for any suspicious activity or phishing attempts
- Stay tuned to official company announcements for restoration timelines
Looking Ahead: The Road to Recovery
The Victoria Secret security incident is a stark reminder of the vulnerabilities that even the largest and most established retailers face in today’s digital landscape. As the company works to restore its online operations and reassure customers, it will also need to address questions about its cybersecurity readiness and future safeguards.
For now, the brand’s physical stores remain a safe harbor for shoppers, but the digital disruption is a costly setback. With a third of its revenue coming from online sales, Victoria’s Secret is under pressure to resolve the incident swiftly and transparently.
Stay updated as more details emerge about the Victoria Secret security incident. If you’re a regular customer, keep an eye on your inbox and the company’s official channels for the latest news and guidance.
Stay informed about the Victoria Secret security incident by following Victoria’s Secret’s official updates. If you have concerns about your account, reach out to customer service or visit your local store for assistance.