Five Below, Inc.
bd_5dc595ab64fb59bc · schema v1 · pii pii-v1
Full breach record for Five Below, Inc. →3 incidents on fileFive Below, Inc. disclosed on July 22, 2026 that on July 15, 2026 it identified anomalous activity on a Company-issued employee computer. The investigation determined that on July 14, 2026 a threat actor used social engineering techniques to gain unauthorized access to that computer and exfiltrated a number of files. The company believes the access was contained and terminated, that no personally identifiable information was accessed or exfiltrated, and that the impact is not material.
J jump to incidentP pin to compareR raw source
Incident timeline
Jul 14, 2026
Begins
Jul 15, 2026
Discovered
Jul 22, 2026
Filed
vs. sector median
7 wks faster
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.