Victoria's Secret says it will postpone earnings report after recent security breach

Victoria's Secret (VSCO) is postponing its Q1 earnings release due to a security breach detected on May 24 that disrupted corporate operations and forced a temporary shutdown of its U.S. website and some in-store services. While systems are being restored, the company released preliminary Q1 net sales of $1.35 billion and adjusted operating income of $32 million, exceeding prior guidance and analyst expectations; VSCO maintains the breach did not impact Q1 results but is assessing the incident's full scope and potential future financial impact amid rising cyberattacks targeting retailers.

Analysis

Victoria's Secret (VSCO) has postponed its first-quarter earnings release following a significant security incident detected on May 24, which disrupted corporate operations and led to a multi-day shutdown of its U.S. e-commerce site and some in-store services. The company, while working to fully restore corporate systems affected by what appears to be a ransomware attack, indicated this disruption prevented access to information necessary for finalizing its Q1 report. Despite this operational challenge, VSCO released preliminary Q1 2025 results for the period ending May 3, reporting net sales of $1.35 billion and an adjusted operating income of $32 million, figures that surpass both its previous guidance and the consensus analyst sales estimate of $1.33 billion. Management affirmed these strong Q1 results were not impacted by the breach, as it occurred post-quarter end; however, the company is still evaluating the full scope of the incident, including potential expenses that could affect future financial performance, underscoring the growing cybersecurity threats prevalent in the retail sector.

Key Decisions for Investors

• Investors should weigh Victoria's Secret's stronger-than-anticipated preliminary Q1 financial results against the significant operational disruptions and the yet-to-be-quantified financial impact stemming from the recent cybersecurity breach.
• Monitor closely for the rescheduled Q1 earnings release, which should provide detailed financials, a comprehensive assessment of the breach's costs, and further information on the restoration of corporate systems and any potential customer data implications.
• Factor in potential near-term stock price volatility arising from the current uncertainty and the delayed earnings report, while also assessing the company's cybersecurity resilience and the broader implications of such incidents for retailers.