Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesVictoria’s Secret & Co. restored its critical systems after a security incident detected on May 24, 2025, and later reported that the incident was resolved. The company has not publicly identified the attack method or responsible group in the disclosures cited here, or confirmed whether customer information was accessed. The event disrupted online sales and some business operations, with the company estimating about $20 million in lost net sales and $14 million in reduced operating income before potential insurance recoveries.
What happened, and when were systems restored?
Victoria’s Secret said it detected a security incident involving its information-technology systems on May 24, 2025. It activated incident-response measures intended to contain and eradicate unauthorized network access, and brought in outside experts. On May 26, the company temporarily shut down corporate systems and its e-commerce website as a precaution.
| Date | What the company or reporting said |
|---|---|
| May 24, 2025 | Victoria’s Secret detected a security incident involving its IT systems. Company announcement |
| May 26, 2025 | Corporate systems and the e-commerce website were temporarily shut down. Company announcement |
| May 29, 2025 | The website was restored, although corporate-system recovery continued. Company announcement |
| June 12, 2025 | A company filing said all critical systems were restored and fully operational. Form 10-Q |
| September 5, 2025 | The company said the incident was resolved and all systems were restored and fully operational. Form 10-Q |
The milestones matter: the online store returned on May 29, but that was not the same as restoring the corporate and other critical systems. The company later said all systems were operating normally during the second quarter of fiscal 2025.
Which parts of the business were affected?
The disruption went beyond the shopping website. Victoria’s Secret identified corporate systems and e-commerce as affected, and said certain limited functions in Victoria’s Secret and PINK stores were also affected; most of those functions had been restored by June 3. The company did not say that all stores closed.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →#1 Best Overall
Employees also lacked access to certain systems and information needed to prepare the company’s quarterly financial reporting. That operational problem delayed the first-quarter 2025 earnings release and call. In its June 3 announcement, the company provided preliminary figures for the quarter ended May 3—approximately $1.35 billion in net sales, $32 million in adjusted operating income and $0.09 in adjusted diluted earnings per share—and said the incident did not affect those results because the quarter had ended before the incident was detected. Those are company-reported preliminary figures, not estimates of the cyber incident’s cost.
Was it ransomware, and was customer data exposed?
Victoria’s Secret described the event as a “security incident” involving its IT systems and disclosed unauthorized network access. The company did not identify a ransomware group, threat actor, ransom demand, or attack method in the cited filings and announcements. BleepingComputer called it a cyberattack in its coverage and reported on June 13, 2025, that no ransomware operation had claimed responsibility at that time. That reporting does not establish that ransomware was used.
The available company disclosures document unauthorized access and operational disruption, but do not publicly specify whether customer information was accessed or taken. No customer-data exposure was confirmed in those disclosures. That is not proof that no data was accessed, and an outage by itself is not proof of a data breach. Customers with an unresolved order or account issue should use Victoria’s Secret’s official customer-service channels rather than relying on unaffiliated support pages.
What did the incident cost the company?
In its September 5, 2025 filing, Victoria’s Secret estimated that the incident reduced net sales by approximately $20 million and operating income by approximately $14 million, before any potential cybersecurity-insurance recoveries. The company said its insurance claim process was ongoing at that point. Its March 5, 2026 full-year results separately attributed approximately $20 million in lost direct-channel sales to the website closure.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →The $20 million and $14 million figures measure different effects: lost sales and reduced operating income, respectively. They are not a reported ransom payment or a complete accounting of every response expense. The company initially said it did not expect a material effect on fiscal-year 2025 results; that assessment does not mean the incident had no financial cost.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What should customers and investors take from the recovery?
For customers, the public record establishes a temporary online-sales interruption and limited effects on some store functions, but does not establish customer-data theft. For investors, it shows why a cyber incident can affect more than revenue channels: access to internal systems can delay financial reporting as well as disrupt operations. Later filings and the company’s 2025 full-year results describe a resolved incident, not an ongoing outage.
Sources: Victoria’s Secret & Co. June 3, 2025 announcement; June 12, 2025 Form 10-Q; BleepingComputer, June 13, 2025; September 5, 2025 Form 10-Q; Victoria’s Secret & Co. 2025 full-year results.
Quick Recap
Best Value
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
