Victoria’s Secret Temporarily Disables US Website and Some Services Following Security Breach

Victoria’s Secret, the well-known lingerie retailer, has temporarily taken down its US website and suspended some in-store services after experiencing a security incident. The company responded quickly by enacting established protocols, engaging third-party cybersecurity experts, and taking precautionary measures to protect customers and operations. While the US website is currently replaced with a notice about ongoing restoration efforts, physical stores and the UK website remain unaffected and operational. The company, headquartered in Ohio and operating about 1,350 stores in 70 countries, has not disclosed specific details about the nature or timing of the incident. The announcement led to a 7% drop in the company’s share price. Customers have voiced frustration on social media, citing difficulties in checking order statuses and reaching customer service. This event follows a series of recent cyberattacks on major UK retailers, including M&S and the Co-op, which suffered significant financial losses and customer data breaches. Experts advise customers to change passwords and enable two-factor authentication, even if they have not received direct notification of compromise, as companies often take time to identify all affected individuals. Authorities suspect ransomware and have identified the crime group Scattered Spider as a possible perpetrator.