2025-06-03 Victoria's Secret & Co. Cybersecurity Incident

Page last updated on June 9, 2025

Victoria’s Secret & Co. initially disclosed a cybersecurity incident in an SEC 8-K filing on 2025-06-03 08:03:07 EDT.

Company Summary

Victoria’s Secret offers lingerie and beauty products.

Incident Details

Material: Unknown
Is Breach: Unknown
Records Compromised: Unknown
Data Types Impacted: No Data Types Tracked (yet)

Compromised Date:
Detected Date: 2025-05-24
Disclosure Date: 2025-06-03
Contained Date:
Recovered Date:

Attack Goal: Unknown

Costs: No Costs Tracked (yet)

Filings

8-K filed on 2025-06-03

Victoria’s Secret & Co. filed an 8-K at 2025-06-03 08:03:07 EDT
Accession Number: 0001856437-25-000026

Item 7.01 Regulation FD Disclosure.

A copy of the press release announcing the Company’s first quarter 2025 preliminary unaudited results and providing an update on a recent security incident involving the Company’s information technology systems is furnished as Exhibit 99.1 to this Current Report on Form 8-K.

Exhibit No. 99.1

Victoria’s Secret & Co. Provides First Quarter 2025 Preliminary Results and Update on Security Incident Involving Information Technology Systems

First quarter 2025 earnings release and call webcast postponed

Company expects net sales, adjusted operating income, and adjusted diluted EPS for the first quarter to be near or exceed the high-end of previously issued guidance ranges

Reynoldsburg, Ohio (June 3, 2025)-Victoria’s Secret & Co. (“VS&Co” or the “Company”) (NYSE: VSCO) is providing an update on a recent security incident involving its information technology systems.

On May 24, 2025, the Company detected a security incident involving its information technology systems. The Company immediately enacted its response protocols to attempt to contain and eradicate unauthorized network access, and third-party experts were engaged.

As a precaution, the Company also temporarily shut down its corporate systems and e-commerce website on May 26, 2025. The website was restored on May 29, 2025 and work is ongoing to restore full access to corporate systems. The incident also affected certain limited functions in Victoria’s Secret and PINK stores, most of which have been restored.

The incident did not impact the Company’s financial results for the first quarter of fiscal 2025, which were near or exceeded the high-end of guidance as discussed below. However, the restoration process has prevented employees from accessing certain systems and information needed to support the Company’s release of its financial results for the first quarter ended May 3, 2025. As a result, the Company is postponing the date of its previously announced first quarter 2025 earnings release and earnings call webcast. The Company plans to announce a new earnings release and earnings call webcast date in due course.

The Company continues to assess the full scope and impact of the incident, under the oversight of the Audit Committee of the Board of Directors. Although this incident has not caused a material disruption to its operations to date, the Company has incurred, and may continue to incur, expenses and other financial impacts related to this incident, which could negatively impact its future financial results, including for the second quarter of fiscal 2025.

Company Information