Victoria’s Secret, the well-known lingerie and beauty retailer, shut down its website and paused all online orders on Thursday after experiencing a major cybersecurity breach. The company posted a brief message on its homepage alerting customers to a “security incident,” and shortly afterward, all site functionality was disabled.
As of Thursday evening, the website displayed only a simple notice about the incident, with no links, shopping options, or access to customer accounts available. Online transactions were suspended, and the company halted order processing and fulfillment in response to the breach.
Details about the nature and extent of the cyberattack were not made public. Victoria’s Secret did not confirm whether any customer data had been compromised or what specific systems were affected. It also remained unclear who may have been behind the attack or whether it involved ransomware or other malicious activity.
The company’s physical retail stores remained operational and were not impacted by the breach. Customers were still able to shop in person at locations nationwide, though online shopping remained unavailable throughout the day.
Cybersecurity experts noted that large retailers like Victoria’s Secret are frequent targets for digital attacks due to the vast amounts of personal and financial information they store. Breaches of this kind can lead to compromised credit card data, email addresses, and account logins, often resulting in widespread disruption and significant reputational harm.
Victoria’s Secret encouraged customers to monitor their bank and credit card statements closely and report any suspicious activity. Experts also advised consumers to change their passwords—particularly if they used the same login credentials across multiple websites.
It was not known as of press time whether federal authorities or cybersecurity firms had been called in to assist with the investigation. The company did not provide a timeline for restoring its website or resuming online operations but stated that it would share updates as more information became available.
This incident added Victoria’s Secret to a growing list of major retailers that have suffered cyberattacks in recent years, including Target, Home Depot, and Neiman Marcus. In many of those cases, companies were forced to invest heavily in security upgrades and public relations recovery efforts to rebuild customer trust.
As of Thursday, the company’s website remained offline, with only the security message visible. Customers looking to shop were directed to visit retail stores while the company worked to resolve the issue.
Victoria’s Secret had not issued a full statement or press release regarding the breach as of this writing but assured customers it was actively investigating the matter and taking the necessary steps to protect consumer data.