Victoria’s Secret has taken down its website along with some store services because of an ongoing cyber attack. The fashion giant’s offline stores are still functional, however. No impact on operations other than the site outage has been reported at the time of writing.
The company is yet to disclose the nature of the attack or the extent of the damage. At the moment, the Victoria’s Secret website reads the following notice:
Valued customer, we identified and are taking steps to address a security incident. We have taken down our website and some in store services as a precaution. Our team is working around the clock to fully restore operations. We appreciate your patience during this process. In the meantime, our Victoria’s Secret and PINK stores remain open and we look forward to serving you.
A company spokesperson told BleepingComputer that the company has hired external security experts to investigate the incident and its impact. Bloomberg reports that CEO Hillary Super also told employees that recovery will take a long time in an internal company note sent to employees.
The attack on Victoria’s Secret is the latest in a recent string of attacks on fashion and supermarket retailers. Big retail chains like Marks & Spencer and Co-op were breached in May 2025, with sportswear giant Adidas also announcing a data breach after hackers broke into a customer service provider and stole customer contact information.
There’s no evidence to suggest these attacks are linked, but the outcome has been more or less identical in all cases. Hackers break into company systems to steal customer information, which can then be used to carry out targeted identity theft or financial fraud attacks.
In the News: Virgin Media’s O2 network exposed customer phone locations
