Victoria's Secret takes down US website after 'security incident'

Victoria's Secret, the famous lingerie retailer, has temporarily taken down its US website following a security incident that has disrupted its online services. The company replaced its usual website with a notice informing customers that it is working around the clock to restore full operations. Despite the website being offline, Victoria's Secret stores and those of its spin-off brand, PINK, remain open and continue to serve customers. The UK website for Victoria's Secret has not been affected by this incident and continues to operate normally.

In a statement, Victoria's Secret explained that it immediately activated its response protocols upon discovering the security issue. The company engaged third-party cybersecurity experts and took down the website and some in-store services as a precautionary measure. However, the company has not provided further details about the nature of the security incident or when it began. Victoria's Secret is headquartered in Ohio and operates approximately 1,350 retail stores across 70 countries worldwide. Following the announcement of the incident, the company's share price dropped by about 7 percent on the stock market.

The disruption has caused frustration among customers, many of whom have taken to social media to express their concerns. Some customers have complained about being unable to check their order status for several days and the lack of response from customer service. This incident at Victoria's Secret is part of a wider trend of cyberattacks targeting major UK retailers. For example, Marks & Spencer (M&S) has reported a hack that is expected to cause disruptions until July, and the Co-op has experienced empty shelves and payment problems due to a cyberattack. These attacks often involve ransomware, where hackers encrypt company data and demand payment to restore access. Cybersecurity experts advise customers affected by these attacks to change their passwords immediately and enable two-factor authentication to protect their accounts. They also warn that even customers who have not been notified may have had their information compromised, as companies can take weeks to identify all affected individuals.