Victoria's Secret has taken down its U.S. website and halted some in-store services due to an unspecified 'security incident.' The company did not confirm whether it was a cyber or ransomware attack but stated that it had enacted its response protocols and engaged third-party experts to address the issue. The incident has caused operational disruptions, including the inability to process online orders and fulfill customer care services. The company's shares tumbled about 4% as a result.
Source: https://www.cbsnews.com/news/victorias-secret-us-website-dark-security-incident/
TPRM report: https://scoringcyber.rankiteo.com/company/victorias-secret
"id": "vic959052925",
"linkid": "victorias-secret",
"type": "Cyber Attack",
"date": "5/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Fashion',
'location': 'Ohio, USA',
'name': "Victoria's Secret",
'type': 'Retailer'}],
'date_publicly_disclosed': '2023-10-05',
'description': "Victoria's Secret has taken down its U.S. website and says "
'some in-store services will also be unavailable as it '
"addresses an unspecified 'security incident.'",
'impact': {'downtime': ['website', 'customer care services'],
'operational_impact': ['website',
'customer care services',
'office operations'],
'systems_affected': ['U.S. website',
'in-store services',
'customer care services',
'office operations',
'company email accounts']},
'investigation_status': 'ongoing',
'references': [{'date_accessed': '2023-10-05', 'source': 'Bloomberg News'},
{'date_accessed': '2023-10-05', 'source': 'CBS News'}],
'response': {'communication_strategy': ['social media updates',
'customer FAQ'],
'containment_measures': ['taking down the website',
'halting some in-store services'],
'incident_response_plan_activated': True,
'recovery_measures': ['extending return windows',
'extending direct mail coupon offers'],
'third_party_assistance': True},
'title': "Victoria's Secret Security Incident",
'type': 'Cyber Incident'}