Five Below

Disclosed Oct 5, 20187 years ago56,102 affectedConfirmed

Official notice

What is known

People affected	56,102 (as reported by the organization)
Disclosed	Oct 5, 2018
Discovered	Jan 17, 2019
Happened	Nov 13, 2018
Attack	Not stated
Data exposed	Names, Social Security numbers, Government IDs, Payment cards, Financial, Passwords
Sector	Other · US
Status	Confirmed

Sources

Source	Kind
California Attorney General breach notice: Five Belowoag.ca.gov · Official notice	Official notice
Indiana Attorney General 2019 data breach report: Five Belowin.gov · Official notice	Official notice
Indiana Attorney General 2018 data breach report: Five Belowin.gov · Official notice	Official notice
Maine Attorney General breach notice archive: Five Belowmaine.gov · Official notice	Official notice
Maine Attorney General breach notice archive: Five Belowmaine.gov · Official notice	Official notice

Notices filed

Where	Filed	People
Indiana AGresidents of IN	Oct 5, 2018	85
Maine AGresidents of ME	Oct 5, 2018	17
California AGresidents of CA	Feb 14, 2019
Indiana AGresidents of IN	Feb 14, 2019	1,762
Maine AGresidents of ME	Feb 14, 2019	188

Other breaches at Five Below

Breach	Disclosed	Attack	Sector	Status	Affected
Cybersecurity incident disclosed to the SEC (8-K Item 8.01)Jul 222 months agoPhishing	Jul 222 months ago	Phishing	Other	Confirmed	Unknown

History of this record

2026-09-25 · discovered: empty to 2019-01-17 · backfill source
2026-09-25 · data_types: [] to ["names","ssn","government-id","payment-card","financial","passwords"] · backfill source
2026-09-25 · disclosed: 2019-02-14 to 2018-10-05 · backfill source
2026-09-25 · records_basis: empty to organization · backfill source
2026-09-25 · records: empty to 56102 · backfill source
2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Five Below

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.