Victoria’s Secret & Co. told associates that unauthorized logins to HR Access payroll accounts and changes to direct deposit details occurred between October 9 and October 16, 2026. The company’s notice is dated November 9, 2026, and a copy was filed with the Massachusetts Attorney General. The company said the activity followed scams targeting employees of multiple companies.
The reported activity involved payroll and direct deposit information. The accounts also contained Social Security numbers, but the company said it did not know whether those numbers were viewed. No total affected count has been published; the notice identifies one affected individual in Rhode Island. The date the company first detected the activity has not been disclosed.
As of the source page’s November 12, 2026 update, the total number affected and the date of discovery remained undisclosed. Further details may emerge as additional notices or information become available.