All IT systems restored at Victoria’s Secret after security incident

Victoria’s Secret has restored all of its critical systems, which were taken down shortly after the lingerie retailer was faced with a security incident.

On May 24th, 2025, following the end of the company’s first quarter, Victoria’s Secret announced that it was dealing with a security incident. As a precaution, the clothing and lingerie retailer decided to temporarily shut down its website and certain in-store services.

“We identified and are taking steps to address a security incident. We immediately enacted our response protocols, third-party experts are engaged, and we took down our website and some in-store services as a precaution,” a company spokesperson told the media.

All 800 physical stores worldwide remained open and continued to operate as normal.

In a filing with the Securities and Exchange Commission (SEC), Victoria’s Secret disclosed that all of its IT systems have been fully restored and that it is investigating the incident.

“All critical systems are restored and fully operational. We continue to assess the full scope and impact of the incident,” the filing states.

According to the company, the security incident hasn’t caused a “material disruption” to its operations to date. Nor does it believe it will have a material impact on the financial results of the company’s fiscal year 2025.

“The investigation remains ongoing and we have incurred, and may continue to incur, expenses and other financial impacts related to this incident, which could negatively impact our future financial results,” the company added.

During the presentation of its Q1 earnings report, Victoria’s Secret Chief Financial Officer (CFO) Scott Sekella said that the security incident will most likely siphon about $10 million from its Q2 operating income.