ISO 27001 Certificate
SOC 1 Type I Certificate
SOC 2 Type II Certificate
PCI DSS
HIPAA
RGPD
Internal validation & live display
Multiple badges & continuous verification
Faster underwriting decisions
ISOSOC2 Type 1SOC2 Type 2PCI DSSHIPAAGDPR

At Five Below our growth is a result of the people who embrace our purpose: We know life is way better when you are free to Let Go & Have Fun in an amazing experience, filled with unlimited possibilities, priced so low, you can always say yes to the newest, coolest stuff! Just ask any of our over 20,000 associates who work at Five Below and they’ll tell you there’s no other place like it. It all starts with our purpose and then, The Five Below Way, which is our values and behaviors that each and every associate believes in. So if your heart is beating a little quicker and your smile is getting bigger now that you know what we’re all about, let’s just say your search for a one-of-a-kind experience that’s much more than a j-o-b just might be officially ending HERE. It’s all about culture at Five Below, making this a place that can inspire you as much as you inspire us with big ideas, super energy, passion, and the ability to make the workplace a WOWplace! BE AWARE OF FRAUD! Please be aware of potentially fraudulent job postings or suspicious recruiter activity by persons that are posing as a Five Below recruiters. Please confirm that the person you are working with has an @fivebelow.com email address. Additionally, Five Below does NOT request financial information or payments from candidates at any point during the hiring process. If you suspect fraudulent activity, please visit Five Below’s Careers Site at www.fivebelow.com/info/careers to verify the posting.

Five Below A.I CyberSecurity Scoring

Five Below

Company Details

Linkedin ID:

five-below

Employees number:

12,118

Number of followers:

193,186

NAICS:

43

Industry Type:

Retail

Homepage:

fivebelow.com

IP Addresses:

0

Company ID:

FIV_4813942

Scan Status:

In-progress

AI scoreFive Below Risk Score (AI oriented)

Between 750 and 799

https://images.rankiteo.com/companyimages/five-below.jpeg
Five Below Retail
Updated:
  • Powered by our proprietary A.I cyber incident model
  • Insurance preferes TPRM score to calculate premium
globalscoreFive Below Global Score (TPRM)

XXXX

https://images.rankiteo.com/companyimages/five-below.jpeg
Five Below Retail
  • Instant access to detailed risk factors
  • Benchmark vs. industry & size peers
  • Vulnerabilities
  • Findings

Five Below Company CyberSecurity News & History

Past Incidents
1
Attack Types
1
EntityTypeSeverityImpactSeenBlog DetailsIncident DetailsView
Five Below, Inc.Breach85411/2018
Rankiteo Explanation :
Attack with significant impact with customers data leaks

Description: The California Office of the Attorney General reported a data breach involving Five Below, Inc. on February 14, 2019. The breach, which occurred between November 13, 2018, and January 11, 2019, involved unauthorized access to customers' payment card information, such as card numbers and security codes. The number of affected individuals is currently unknown.

Five Below, Inc.
Breach
Severity: 85
Impact: 4
Seen: 11/2018
Blog:
Rankiteo Explanation
Attack with significant impact with customers data leaks

Description: The California Office of the Attorney General reported a data breach involving Five Below, Inc. on February 14, 2019. The breach, which occurred between November 13, 2018, and January 11, 2019, involved unauthorized access to customers' payment card information, such as card numbers and security codes. The number of affected individuals is currently unknown.

Ailogo

Five Below Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

🔒
Incident Predictions locked
Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

🔒
A.I. Risk Score Predictions locked
Access Monitoring Plan
statics

Underwriter Stats for Five Below

Incidents vs Retail Industry Average (This Year)

No incidents recorded for Five Below in 2025.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Five Below in 2025.

Incident Types Five Below vs Retail Industry Avg (This Year)

No incidents recorded for Five Below in 2025.

Incident History — Five Below (X = Date, Y = Severity)

Five Below cyber incidents detection timeline including parent company and subsidiaries

Five Below Company Subsidiaries

SubsidiaryImage

At Five Below our growth is a result of the people who embrace our purpose: We know life is way better when you are free to Let Go & Have Fun in an amazing experience, filled with unlimited possibilities, priced so low, you can always say yes to the newest, coolest stuff! Just ask any of our over 20,000 associates who work at Five Below and they’ll tell you there’s no other place like it. It all starts with our purpose and then, The Five Below Way, which is our values and behaviors that each and every associate believes in. So if your heart is beating a little quicker and your smile is getting bigger now that you know what we’re all about, let’s just say your search for a one-of-a-kind experience that’s much more than a j-o-b just might be officially ending HERE. It’s all about culture at Five Below, making this a place that can inspire you as much as you inspire us with big ideas, super energy, passion, and the ability to make the workplace a WOWplace! BE AWARE OF FRAUD! Please be aware of potentially fraudulent job postings or suspicious recruiter activity by persons that are posing as a Five Below recruiters. Please confirm that the person you are working with has an @fivebelow.com email address. Additionally, Five Below does NOT request financial information or payments from candidates at any point during the hiring process. If you suspect fraudulent activity, please visit Five Below’s Careers Site at www.fivebelow.com/info/careers to verify the posting.

Loading...
similarCompanies

Five Below Similar Companies

AZADEA Group is a premier lifestyle retail company that owns and operates more than 40+ leading international franchise concepts across the Middle East and Africa. With over 13,500 employees, dedicated offices in every market it operates, and world-class infrastructure, the company oversees over 700

RITE AID

Rite Aid is a full-service pharmacy committed to improving health outcomes. Rite Aid is defining the modern pharmacy by meeting customer needs with a wide range of solutions that offer convenience, including retail and delivery pharmacy, as well as services offered through our wholly owned subsidi

Wegmans Food Markets

Wegmans Food Markets is a family-owned regional supermarket chain and one of the largest private companies in the US. Recognized as an industry leader and innovator, the company was founded in 1916 and employs over 53,000 people. Wegmans has been named one of the “100 Best Companies to Work For” by

Sears is a leading integrated retailer and provider focused on seamlessly connecting the digital and physical shopping experiences to serve our members - wherever, whenever and however they want to shop. We are part of the Transformco family of brands which operates through its subsidiaries, inclu

Tractor Supply Company

For more than 85 years, Tractor Supply has been passionate about serving the needs of recreational farmers, ranchers, homeowners, gardeners, pet enthusiasts and all those who enjoy living Life Out Here. Tractor Supply is the largest rural lifestyle retailer in the U.S., ranking 296 on the Fortune 50

americanas s.a.

We are Americanas, one of the largest retailers in the country, with over 95 years of history. Our brand, loved by Brazilians, aims to simplify and improve the lives of families. The integration of more than 1,600 stores across all states, along with an e-commerce platform that complements the physi

BİM Birleşik Mağazalar A.Ş

Türkiye’de perakende sektörünün lideri olan BİM Birleşik Mağazalar A.Ş., temel gıda ve tüketim malzemelerinin uygun fiyat ve yüksek kaliteyle tüketiciye ulaştırılması hedefiyle faaliyetlerine 1995 yılında 21 mağazayla başlamıştır. Yüksek indirim (hard-discount) modelinin Türkiye’deki ilk temsilcisi

Marisa S.A.

Marisa S.A. is the largest Brazilian department store chain specialized in women’s clothing based on the number of stores in Brazil. The Company’s business strategy and operations focus primarily on middle-lower income women between the ages of 20 and 35. The Company’s target customers are members o

One of the world’s largest retailers of consumer goods from food to fashion. Serving our customers, communities and planet a little better every day in our stores and online is at the heart of everything we do. Founded in 1919 by Jack Cohen using the £30 he received on leaving the Royal Flying Corp

newsone

Five Below CyberSecurity News

December 08, 2025 11:41 AM
Five Below shares rise 1.8% premarket after Morgan Stanley raises target price

Five Below shares rise 1.8% premarket after Morgan Stanley raises target price ... -December 08, 2025 at 06:41 am EST - MarketScreener.

December 05, 2025 11:38 PM
Cybersecurity Name Zscaler Stock Taunts Investors Near A Buy Point

Zscaler stock is retreating after attempting to break out of a cup base. The cybersecurity stock has gained around 69% so far this year.

November 17, 2025 08:00 AM
Democratic senators urge Trump administration to release cybersecurity issues report

Two Democratic senators urged Trump administration officials on Wednesday to release a report on security issues in the telecommunications...

November 16, 2025 08:00 AM
Five major changes to the regulation of cybersecurity in the UK under the Cyber Security and Resilience Bill

As the UK Government has recognized, cyber incidents—such as Jaguar Land Rover, Marks and Spencer, Royal Mail and the British Library—are...

November 10, 2025 08:00 AM
Cyberspace and Cybersecurity: Introduction - How Does Cyberspace Work?

Learn about the many places information is transferred across the internet—including under the ocean, up in space, and in your pocket...

October 23, 2025 07:00 AM
Top 5 Cybersecurity Facts, Figures, Predictions, And Statistics For 2020 To 2021

Cybercrime Magazine extrapolates the top 5 market data points from our research in order to summarize the cybersecurity industry through 2021.

October 01, 2025 07:00 AM
Personal Cybersecurity Tips for Seniors: Protect Your Online Life

Older adults face growing cybersecurity risks online. Learn practical steps to strengthen your digital security, including safe password...

September 23, 2025 07:00 AM
5 Cybersecurity Stocks to Buy for a Strong and Secured Portfolio

CRWD, FFIV, QLYS, PLTR and SAIL are five cybersecurity stocks that offer strong growth prospects and portfolio security in Q4 2025.

July 07, 2025 07:00 AM
What is the Future of Cybersecurity?

Below are five cybersecurity trends enterprises must understand and address as they move forward. Trend 1: AI is a double-edged sword in cybersecurity.

faq

Frequently Asked Questions

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.

Five Below CyberSecurity History Information

Official Website of Five Below

The official website of Five Below is http://www.fivebelow.com.

Five Below’s AI-Generated Cybersecurity Score

According to Rankiteo, Five Below’s AI-generated cybersecurity score is 787, reflecting their Fair security posture.

How many security badges does Five Below’ have ?

According to Rankiteo, Five Below currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Does Five Below have SOC 2 Type 1 certification ?

According to Rankiteo, Five Below is not certified under SOC 2 Type 1.

Does Five Below have SOC 2 Type 2 certification ?

According to Rankiteo, Five Below does not hold a SOC 2 Type 2 certification.

Does Five Below comply with GDPR ?

According to Rankiteo, Five Below is not listed as GDPR compliant.

Does Five Below have PCI DSS certification ?

According to Rankiteo, Five Below does not currently maintain PCI DSS compliance.

Does Five Below comply with HIPAA ?

According to Rankiteo, Five Below is not compliant with HIPAA regulations.

Does Five Below have ISO 27001 certification ?

According to Rankiteo,Five Below is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Industry Classification of Five Below

Five Below operates primarily in the Retail industry.

Number of Employees at Five Below

Five Below employs approximately 12,118 people worldwide.

Subsidiaries Owned by Five Below

Five Below presently has no subsidiaries across any sectors.

Five Below’s LinkedIn Followers

Five Below’s official LinkedIn profile has approximately 193,186 followers.

NAICS Classification of Five Below

Five Below is classified under the NAICS code 43, which corresponds to Retail Trade.

Five Below’s Presence on Crunchbase

Yes, Five Below has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/five-below.

Five Below’s Presence on LinkedIn

Yes, Five Below maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/five-below.

Cybersecurity Incidents Involving Five Below

As of December 14, 2025, Rankiteo reports that Five Below has experienced 1 cybersecurity incidents.

Number of Peer and Competitor Companies

Five Below has an estimated 15,526 peer or competitor companies worldwide.

What types of cybersecurity incidents have occurred at Five Below ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

Incident Details

Can you provide details on each incident ?

Incident : Data Breach

Title: Data Breach at Five Below, Inc.

Description: The California Office of the Attorney General reported a data breach involving Five Below, Inc. on February 14, 2019. The breach, which occurred between November 13, 2018, and January 11, 2019, involved unauthorized access to customers' payment card information, such as card numbers and security codes. The number of affected individuals is currently unknown.

Date Detected: 2019-02-14

Date Publicly Disclosed: 2019-02-14

Type: Data Breach

Attack Vector: Unauthorized Access

What are the most common types of attacks the company has faced ?

Common Attack Types: The most common types of attacks the company has faced is Breach.

Impact of the Incidents

What was the impact of each incident ?

Incident : Data Breach FIV856080425

Data Compromised: Payment card information, Card numbers, Security codes

Payment Information Risk: High

What types of data are most commonly compromised in incidents ?

Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Payment Card Information, Card Numbers, Security Codes and .

Which entities were affected by each incident ?

Incident : Data Breach FIV856080425

Entity Name: Five Below, Inc.

Entity Type: Retail

Industry: Retail

Data Breach Information

What type of data was compromised in each breach ?

Incident : Data Breach FIV856080425

Type of Data Compromised: Payment card information, Card numbers, Security codes

Sensitivity of Data: High

References

Where can I find more information about each incident ?

Incident : Data Breach FIV856080425

Source: California Office of the Attorney General

Date Accessed: 2019-02-14

Where can stakeholders find additional resources on cybersecurity best practices ?

Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: California Office of the Attorney GeneralDate Accessed: 2019-02-14.

Additional Questions

Incident Details

What was the most recent incident detected ?

Most Recent Incident Detected: The most recent incident detected was on 2019-02-14.

What was the most recent incident publicly disclosed ?

Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2019-02-14.

Impact of the Incidents

What was the most significant data compromised in an incident ?

Most Significant Data Compromised: The most significant data compromised in an incident were Payment card information, Card numbers, Security codes and .

Data Breach Information

What was the most sensitive data compromised in a breach ?

Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Payment card information, Card numbers and Security codes.

References

What is the most recent source of information about an incident ?

Most Recent Source: The most recent source of information about an incident is California Office of the Attorney General.

cve

Latest Global CVEs (Not Company-Specific)

Description

A weakness has been identified in itsourcecode Online Pet Shop Management System 1.0. This vulnerability affects unknown code of the file /pet1/addcnp.php. This manipulation of the argument cnpname causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function image_check of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be exploited.

Risk Information
cvss2
Base: 2.6
Severity: HIGH
AV:N/AC:H/Au:N/C:N/I:P/A:N
cvss3
Base: 3.7
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
cvss4
Base: 6.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/update_student.php. This manipulation of the argument stud_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/save_user.php. The manipulation of the argument firstname results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php. The manipulation of the argument user_id leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Access Data Using Our API

SubsidiaryImage

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=five-below' -H 'apikey: YOUR_API_KEY_HERE'

What Do We Measure ?

revertimgrevertimgrevertimgrevertimg
Incident
revertimgrevertimgrevertimgrevertimg
Finding
revertimgrevertimgrevertimgrevertimg
Grade
revertimgrevertimgrevertimgrevertimg
Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network Security

Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)

Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)

Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat Intelligence

Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Top LeftTop RightBottom LeftBottom Right
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
Users Love Us Badge