Victoria’s Secret Shuts Website Amid Cybersecurity Incident

Victoria’s Secret has temporarily suspended most of its website functions and some in-store services in response to a cybersecurity incident, the company confirmed Wednesday. The Ohio-based lingerie and apparel retailer issued a statement on its website and told Reuters that it had “identified and is taking steps to address a security incident.”

A company spokesperson said that Victoria’s Secret promptly activated internal security protocols, brought in third-party cybersecurity experts, and disabled its online platform and select store services as a precaution. The full nature of the breach and its timeline remain unclear, and the company has not disclosed whether customer data was compromised.

Despite the disruption, Victoria’s Secret and PINK brick-and-mortar locations remain open for business across its global network. The company operates around 1,350 retail stores in 70 countries.

Following the announcement, shares of Victoria’s Secret & Co. (NYSE: VSCO) dropped approximately 7%, closing at $20.99 on Wednesday. The company has not provided a timeline for when digital services will be fully restored.

The incident adds to growing concerns in the retail industry about cybersecurity risks, especially for brands with large e-commerce platforms and international operations. As more shoppers rely on digital channels, companies like Victoria’s Secret face increased pressure to bolster online defenses and protect customer information.

Victoria’s Secret has not yet commented on whether it will notify affected users or offer identity protection services. The company urges customers to monitor their accounts and stay tuned for further updates through its official communication channels.