therecord.media Victoria's Secret Cybersecurity Incident Disrupts Operations
Article Content
- •Victoria’s Secret's systems were compromised starting May 24, 2025.
- •The company's e-commerce website was down for several days due to unauthorized access.
- •The incident is part of a series of recent cyberattacks on fashion brands.
Victoria’s Secret & Co. experienced a cybersecurity incident starting May 24, 2025, leading to the shutdown of its corporate systems and U.S. e-commerce website. The company detected unauthorized network access, prompting immediate response protocols and engagement of third-party experts. The website was down for several days, with a public acknowledgment of the incident made on May 28, 2025. Although the website returned on May 29, critical systems were not fully operational until June 12, 2025. The extent of data theft and ransomware involvement remains unresolved. The incident has drawn attention as part of a broader trend affecting multiple fashion brands, including Adidas and Dior, which have also reported security breaches recently.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (6)
Following this threat?
Track Adidas in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What systems were affected?
Is customer data at risk?
What steps is the company taking?
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…