The Philadelphia-based retailer identified suspicious activity on a company-issued computer and immediately activated its cybersecurity response plan. By enlisting third-party experts to contain the threat, the firm successfully halted the breach before it could spread to other internal platforms or data environments.

Investigators determined the intruder gained access through social engineering, successfully exfiltrating specific files before the connection was terminated. Despite the intrusion, Five Below reported that no personally identifiable information was exposed, and the company’s broader operational infrastructure remains secure.