Victoria's Secret

Victoria's Secret experienced a security incident on May 24 that forced the company to shut down corporate systems and its e-commerce website. The company operates around 1,380 retail stores in nearly 70 countries and had reported net sales of $1.353 billion for the first quarter of 2025. Despite the incident, the company believes it will have no material impact on its yearly fiscal results. The attack disrupted the release of financial results for the first quarter due to unreachable systems. No ransomware operations have claimed responsibility for the attack.

Source: https://www.bleepingcomputer.com/news/security/victorias-secret-restores-critical-systems-after-cyberattack/

TPRM report: https://scoringcyber.rankiteo.com/company/victoria's-secret

"id": "vic611061325",
"linkid": "victoria's-secret",
"type": "Cyber Attack",
"date": "6/2025",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'industry': 'Fashion',
                        'location': 'Global',
                        'name': "Victoria's Secret",
                        'size': ['1,380 retail stores', 'Nearly 70 countries'],
                        'type': 'Retail'}],
 'date_detected': '2025-05-24',
 'date_publicly_disclosed': '2025-06-03',
 'description': "Victoria's Secret experienced a cybersecurity incident on May "
                '24, 2025, which forced the company to shut down corporate '
                'systems and the e-commerce website. The incident was '
                'disclosed in a filing with the U.S. Securities and Exchange '
                'Commission. The company engaged external experts to assess '
                'the impact and has since restored all critical systems.',
 'impact': {'downtime': ['May 26, 2025'],
            'operational_impact': ['delayed quarterly earnings release'],
            'systems_affected': ['corporate systems',
                                 'e-commerce website',
                                 'some in-store services']},
 'investigation_status': 'Ongoing',
 'references': [{'source': 'BleepingComputer'}],
 'response': {'communication_strategy': ['public disclosure', 'SEC filing'],
              'containment_measures': ['shut down corporate systems and '
                                       'e-commerce website'],
              'incident_response_plan_activated': 'Yes',
              'recovery_measures': ['restored all critical systems'],
              'third_party_assistance': 'Yes'},
 'title': "Victoria's Secret Cyber Incident",
 'type': 'Cyberattack'}