Five Below says cyber incident on employee computer contained, no material impact expected

• Five Below identified anomalous activity on a company-issued employee computer on July 15, 2026.
• A threat actor used social engineering on July 14, 2026, gained unauthorized access, then exfiltrated files from the device.
• Response measures contained the incident; access was terminated; activity was limited to the employee’s environment.
• No personally identifiable information was accessed or taken; other systems, platforms, data, or environments were not affected.
• No material impact on strategy, operations, financial condition, or results is expected based on current information.

Disclaimer: This news brief was created by Public Technologies (PUBT) using generative artificial intelligence. While PUBT strives to provide accurate and timely information, this AI-generated content is for informational purposes only and should not be interpreted as financial, investment, or legal advice. Five Below Inc. published the original content used to generate this news brief via EDGAR, the Electronic Data Gathering, Analysis, and Retrieval system operated by the U.S. Securities and Exchange Commission (Ref. ID: 0001193125-26-312573), on July 22, 2026, and is solely responsible for the information contained therein.