Five Below, Inc. reported a cybersecurity incident on July 14, 2026, where a threat actor used social engineering to gain unauthorized access to an employee's computer and exfiltrated files. The company's forensic investigation, assisted by third-party experts, contained and terminated the immediately following access, and the company believes the incident was limited to personally identifiable information (PII) was not accessed or exfiltrated. The company does not believe the incident will have a material impact on its business strategy, operations, financial condition, or results of operations. Five Below, Inc. is a specialty retail company that sells high-value, low-cost items to children and teenagers.