United States
USA
Security incident shuts Victoria's Secret e-commerce site and reduces sales
Victoria's Secret detected unauthorized network access on May 24 and shut down corporate systems and its e-commerce website on May 26 as part of containment. The website returned May 29, and later SEC filings estimated the closure reduced 2025 net sales by about $20 million and operating income by about $14 million.
73
Estimated severity
73 / 100
99
Source reliability
99 / 100
Approximate Date
24/05/2025
Targeted Company
VICTORIA'S SECRET
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
United States
Affected countries
United States
Impacted regions
No information
Operational Impact
Duration
3 days
Financial impact (USD M)
$14M
Impact types
Service unavailabilityOrder processing disruptionOperational disruption
Affected sectors
Retail
Affected departments
Information TechnologySalesOrder ManagementCustomer Service
Attack Profile
Attack types
Unauthorized access
Attributed threat actors
No information
Sources
Incident Sources
sec.govhttps://www.sec.gov/Archives/edgar/data/1856437/000185643725000026/ex991vsco632025.htmsec.govhttps://www.sec.gov/Archives/edgar/data/1856437/000185643725000039/vsco-20250802.htmapnews.comhttps://apnews.com/article/c870000e7ae21369df52a5347626435dreuters.comhttps://www.reuters.com/business/victorias-secret-says-cyber-incident-led-temporary-website-shut-down-2025-06-03/