{"id":5528,"date":"2025-05-30T00:09:06","date_gmt":"2025-05-29T23:09:06","guid":{"rendered":"https:\/\/villpress.com\/?p=5528"},"modified":"2025-05-30T00:09:20","modified_gmt":"2025-05-29T23:09:20","slug":"victorias-secret-website-outage-and-security-incident-may-2025","status":"publish","type":"post","link":"https:\/\/villpress.com\/cs\/victorias-secret-website-outage-and-security-incident-may-2025\/","title":{"rendered":"Victoria\u2019s Secret Website Outage and Security Incident (May 2025)"},"content":{"rendered":"\n<p>Victoria\u2019s Secret\u2019s US e-commerce site and related systems went dark on May 28\u201329, 2025 following what the company called a <strong>\u201csecurity incident\u201d<\/strong>. The precise cause has not been confirmed, but news reports treat it as a likely cyberattack or data breach. For example, security researchers noted indicators consistent with the notorious <em>\u201cScattered Spider\u201d<\/em> retail-extortion group (which recently hit other retailers). In one Wednesday update the company even acknowledged that a breach had occurred, though it gave no technical details. In sum, Victoria\u2019s Secret has only said that it identified an ongoing security incident; independent analysis suggests a targeted cyber intrusion in line with recent retailer hacks.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Current Operational Status<\/h2>\n\n\n\n<p>Victoria\u2019s Secret retail store. All brick-and-mortar VS and PINK stores remain open even as the US website is shut down. The company\u2019s homepage now shows a full-page notice: <em>\u201cValued customer, we identified and are taking steps to address a security incident. We have taken down our website and some in-store services as a precaution\u2026 Our team is working around the clock to fully restore operations\u201d<\/em>. This message (on a pink background) is the only thing online shoppers see. Customer-support channels (chat, email and phone) are also offline. By contrast, VS emphasizes that its <strong>physical stores (including PINK)<\/strong> \u201cremain open\u201d, so in-person shopping can continue. (Victoria\u2019s Secret noted that its <strong>UK site is unaffected<\/strong>, implying the breach is localized to its US systems)<\/p>\n\n\n\n<p>The outage affects a large business: Victoria\u2019s Secret operates ~1,380 stores worldwide (annual revenue ~$6.2\u202fbillion). Online sales are critical (roughly $2\u202fbillion of revenue in 2024, about one-third of total sales). As of the latest reports on May 29, the website is still offline, and the company has given no firm date for restoration.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Impact on Operations, Employees, and Customers<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Online Orders &amp; Logistics:<\/strong> E-commerce is effectively paused. VS says it is working to fulfill all orders placed <em>before<\/em> Monday, May 26, and will email customers with tracking once shipments go out. To compensate, the company extended its U.S. return window by 30 days and has reactivated coupons that expired during the outage. (However, customers cannot yet return online purchases in person, that functionality is \u201cpaused\u201d and will be restored later.)<\/li>\n\n\n\n<li><strong>Customer Service:<\/strong> All digital support lines are down. Customers have taken to social media to voice frustration. For example, one X\/Twitter user complained: <em>\u201cHow can I check my order status when your page has been down for 2 days?!? \u2026 You haven\u2019t released any statements giving information about how long this will take.\u201d<\/em>. Retail Dive similarly noted Instagram comments saying the site outage began four days ago, during an ongoing sale, leaving shoppers \u201cat your mercy\u201d without answers.<\/li>\n\n\n\n<li><strong>Employees and Internal Ops:<\/strong> Internally, Victoria\u2019s Secret has felt the impact. Reports indicate the company shut down some office systems mid-week: <strong>some employees were locked out of company email<\/strong> and certain corporate services were halted as the breach was investigated. Management warned staff that recovery will be lengthy (see below).<\/li>\n\n\n\n<li><strong>Business Metrics:<\/strong> The stock market reacted to the news: Victoria\u2019s Secret shares dropped about <strong>4\u20137%<\/strong> when the incident became public. That reflects investor concern over lost sales, remediation costs, and potential data liabilities.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Company and Leadership Statements<\/h2>\n\n\n\n<p>Victoria\u2019s Secret has released only limited public statements. The on-site notice (quoted above) thanks customers for their patience and reminds them that <em>\u201cour Victoria\u2019s Secret and PINK stores remain open\u201d<\/em>. In interviews, a company spokesperson confirmed the gist of the notice. CBS News (AP) quoted a VS spokesperson: <em>\u201cWe immediately enacted our response protocols, third-party experts are engaged, and we took down our website and some in-store services as a precaution. We are working to quickly and securely restore operations.\u201d<\/em>. The company has <em>not<\/em> said whether law enforcement (e.g. FBI) is involved.<\/p>\n\n\n\n<p>At the executive level, CEO <strong>Hillary Super<\/strong> (appointed Sept 2024) privately told employees that \u201crecovery is going to take awhile\u201d. In other words, Victoria\u2019s Secret is braced for a multi-week outage. Official investor FAQs echo that uncertainty: VS notes there is <strong>no specific timeline<\/strong> for the website\u2019s return. In summary, leadership says it is working 24\/7 on the problem, but customers should not expect an immediate fix.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Media Coverage and Expert Analysis<\/h2>\n\n\n\n<p>National media and security experts have been covering the incident closely. CNN, BBC, and others highlighted how unusual this is for a major retailer. CNN pointed out that a retailer of VS\u2019s size rarely sees a prolonged site outage, especially since online sales are so important (about $2B in 2024). The story was picked up by CNN, NBC, and BBC as a top tech\/security news item.<\/p>\n\n\n\n<p>Cybersecurity analysts place the VS incident in a broader context. Several British retailers (Marks &amp; Spencer, Co-op) suffered coordinated hacks in recent weeks, and authorities suspect the Scattered Spider ransomware crew is behind those attacks. Security publication SC Media reported that VS \u201cshut down its website following [an] unspecified cyberattack,\u201d and quoted experts noting signs <em>\u201cconsistent with Scattered Spider\u2019s playbook\u201d<\/em>. An AI-security CEO told CNN that \u201chackers are ahead of the game\u201d and warned retailers often outsource security, making them vulnerable. McAfee and other online-protection firms have advised customers to assume their data might be at risk and to change passwords and enable 2FA as a precaution.<\/p>\n\n\n\n<p>So far, VS has not announced any ransom demand or data breach notification. But experts stress that full resolution could take weeks or months (for instance, Marks &amp; Spencer\u2019s recent hack was said to affect operations into July). Victoria\u2019s Secret\u2019s CEO herself warned employees to expect a drawn-out recovery, underscoring that analysts see this as a major incident, not a short glitch.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Timeline and Outlook<\/h2>\n\n\n\n<p>The timeline of events has been roughly as follows:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>May 26 (Monday):<\/strong> Customers first report issues accessing the Victoria\u2019s Secret site.<\/li>\n\n\n\n<li><strong>May 28 (Wednesday):<\/strong> Company confirms the incident on its site and social media (Wednesday news articles cite the outage). Shares tumble when the news breaks.<\/li>\n\n\n\n<li><strong>May 29 (Thursday):<\/strong> Online site remains down. Victoria\u2019s Secret extends return\/coupon deadlines and issues updates (e.g. via FAQs). CEO Super\u2019s memo (\u201crecovery will take a while\u201d) is reported by Bloomberg. Analysts note the site has been offline since at least Monday.<\/li>\n<\/ol>\n\n\n\n<p>As of May 29, there is no announced fix date. Victoria\u2019s Secret says its team is \u201cworking around the clock\u201d to restore service, but customers should prepare for an extended outage. Most experts advise that remediation (forensics, system rebuild, data recovery) will take many weeks. Meanwhile, VS is operating with backup plans in stores and continuing to update affected customers.<\/p>\n\n\n\n<p><strong>Sources:<\/strong> Reporting by CNN, <a target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/villpress.com\/goto\/https:\/\/www.bbc.com\/news\/articles\/cwy6l5573jyo#:~:text=The%20company%20which%20is%20based,retail%20stores%20across%2070%20countries\"  target=\"_blank\" rel=\"noopener\"><strong>BBC<\/strong><\/a>, AP\/CBS, Security Boulevard, <a target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/villpress.com\/goto\/https:\/\/www.bleepingcomputer.com\/news\/security\/victorias-secret-takes-down-website-after-security-incident\/#:~:text=,your%20patience%20during%20this%20process\"  target=\"_blank\" rel=\"noopener\"><strong>BleepingComputer<\/strong><\/a>, <strong><a target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/villpress.com\/goto\/https:\/\/www.entrepreneur.com\/business-news\/is-victorias-secret-down-security-incident-closes-website\/492446#:~:text=On%20Wednesday%2C%20Victoria%27s%20Secret%20confirmed,its%20website%20go%20fully%20down\"  target=\"_blank\" rel=\"noopener\">Entrepreneur<\/a><\/strong>, and others. All details are accurate as of May 29, 2025.<\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Victoria\u2019s Secret\u2019s US e-commerce site and related systems went dark on May 28\u201329, 2025 following what the company called a \u201csecurity incident\u201d. The precise cause has not been confirmed, but news reports treat it as a likely cyberattack or data breach. For example, security researchers noted indicators consistent with the notorious \u201cScattered Spider\u201d retail-extortion group [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":5529,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_mi_skip_tracking":false,"footnotes":""},"categories":[56],"tags":[],"ppma_author":[331],"class_list":{"0":"post-5528","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-business"},"authors":[{"term_id":331,"user_id":1,"is_guest":0,"slug":"pastakutmanwen","display_name":"Villpress Insider","avatar_url":{"url":"https:\/\/villpress.com\/wp-content\/uploads\/2025\/05\/Logo.png","url2x":"https:\/\/villpress.com\/wp-content\/uploads\/2025\/05\/Logo.png"},"0":null,"1":"","2":"","3":"","4":"","5":"","6":"","7":"","8":""}],"_links":{"self":[{"href":"https:\/\/villpress.com\/cs\/wp-json\/wp\/v2\/posts\/5528","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/villpress.com\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/villpress.com\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/villpress.com\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/villpress.com\/cs\/wp-json\/wp\/v2\/comments?post=5528"}],"version-history":[{"count":1,"href":"https:\/\/villpress.com\/cs\/wp-json\/wp\/v2\/posts\/5528\/revisions"}],"predecessor-version":[{"id":5530,"href":"https:\/\/villpress.com\/cs\/wp-json\/wp\/v2\/posts\/5528\/revisions\/5530"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/villpress.com\/cs\/wp-json\/wp\/v2\/media\/5529"}],"wp:attachment":[{"href":"https:\/\/villpress.com\/cs\/wp-json\/wp\/v2\/media?parent=5528"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/villpress.com\/cs\/wp-json\/wp\/v2\/categories?post=5528"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/villpress.com\/cs\/wp-json\/wp\/v2\/tags?post=5528"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/villpress.com\/cs\/wp-json\/wp\/v2\/ppma_author?post=5528"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}