By Asmita - May 29, 2025
Victoria’s Secret temporarily shuts down website and in-store services due to security incident that occurred over Memorial Day weekend, prompting speculation of cyberattack or data breach. The company has engaged cybersecurity experts to investigate and mitigate the threat, but has not disclosed details about the breach or potential data compromise. Shares drop as online sales, accounting for a third of revenue, remain impacted by prolonged outage. Customers and industry analysts express concern over the lack of information, with some speculating about ransomware attack or data theft amid escalating cyber threats targeting retailers.
Victoria's Secret Heavenly Collection Gift Set via Flickr
LATEST
Victoria’s Secret has temporarily shut down its website and suspended some in-store services following a significant security incident that began over the Memorial Day weekend. Customers visiting the site since Sunday, May 25, have been greeted by a black screen with a notice stating that operations are down as a precaution, fueling widespread speculation about a possible cyberattack or data breach. Despite the online disruption, the company has assured customers that its physical Victoria’s Secret and PINK stores remain open and operational.
The company responded quickly to the incident by enacting its internal response protocols and engaging third-party cybersecurity experts to investigate and mitigate the threat. In official statements, Victoria’s Secret emphasized that the website and certain in-store services were taken offline as a precautionary measure, and that teams are working “around the clock” to restore operations as securely and swiftly as possible. However, as of now, the company has not disclosed specific details about the nature of the breach or whether customer data has been compromised.
This outage is highly unusual for a retailer of Victoria’s Secret’s size, especially given the importance of online sales, which accounted for about one-third of its $2 billion in digital revenue in 2024. The prolonged outage has already impacted the company’s financial standing, with shares dropping nearly 7% following the news of the security incident. The lack of detailed information has led to increased concern among customers and industry analysts, with some Reddit users speculating about the possibility of a ransomware attack or data exfiltration.
Industry experts note that cyberattacks targeting major retailers are becoming more sophisticated, often outpacing the security measures many companies have in place. Victoria’s Secret’s swift engagement of external cybersecurity professionals reflects a growing trend among retailers to seek specialized help in the face of escalating digital threats. The company has yet to confirm when its website and online services will be fully restored, and the incident remains under active investigation.
