FIVE BELOW, INC. - FORM 8-K

On July 15, 2026, Five Below, Inc. identified unauthorized access to an employee's computer due to social engineering. A third-party cybersecurity expert assisted in an investigation and containment. The incident was limited to the employee's computer, with no personally identifiable information accessed or exfiltrated. The company's systems, platforms, and data were unaffected. Five Below, Inc. does not believe this incident will materially impact its business strategy, operations, financial condition, or results. The company is subject to risks related to potential future findings, misuse of exfiltrated data, regulatory actions, and litigation.