FEDERALItem 1.05 · mandatoryMultipleFinancial ServicesOtherFinanceTrusts & EstatesRansomwareCapture Stored DataData ExfiltratedData EncryptedCustomer Data InvolvedEmployee Data InvolvedPIIMediumContained

BRANDYWINE REALTY TRUST

bd_0bc387070c5ab153 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 1, 2024

Filed

May 28, 2024

To disclose

27 days

Affected

Not disclosed

Linked

4 filings

Confidence

81%

Full breach record for BRANDYWINE REALTY TRUST →2 incidents on file

Brandywine Realty Trust (BDN) 8-K/A filed May 28, 2024. On May 1, 2024, a third party gained unauthorized access to portions of BDN's IT systems, deployed encryption, and exfiltrated files including personal information. Financial/operating reporting systems were disrupted. The third party has been removed and access restored. Investigation into personal information scope is ongoing; notifications to affected parties and regulators are planned.

J jump to incidentP pin to compareR raw source

SEC clockMateriality determined May 7, 2024 → Filed May 28, 202421d ✗ SEC 4-day late27 days discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 27 days

May 1, 2024

Discovered

May 7, 2024

Scope determined

May 28, 2024

Filed

vs. sector median

5 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

SEC 8-Kbd_79f5ce124da11bbb2024-05-07 · +21dCandidate
Maine State AGbd_86c1cfa30c6cc5342024-08-06 · +70dVerified by operator
New Hampshire State AGbd_a906e7bd411f874d2024-08-06 · +70dVerified by operator

Name: BRANDYWINE REALTY TRUST
norm: brandywine realty
SEC CIK: 0000790816
Domain: brandywinerealty.com
Industry: Real Estate Investment Trust (REIT)

Name: BRANDYWINE REALTY TRUST
norm: brandywine realty
SEC CIK: 0000790816
Domain: brandywinerealty.com
Industry: Real Estate Investment Trust (REIT)
Industry: Financial Servicesnaics mapOtherllm
NAICS 525920 · Trusts, Estates, and Agency Accounts

Discovered: May 1, 2024
Materiality determined: May 7, 2024
Notification sent: —
Affected individuals: Not disclosed
Data types: PII
Attack vector: Unknown
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1119 Automated CollectionT1074 Data Staged
Threat actor: ExternalFinancial
Regulator citations: law enforcement notified

During the incident: Initiated previously established response protocols
Engaged leading external cybersecurity experts
Activated incident response plan
Shut down portions of IT systems
Notified law enforcement
Removed third party from IT systems
Restored access to affected information
Changes made: Evaluating additional procedures and software to strengthen cybersecurity surveillance
Strengthening information backup systems
Pursuing insurance recoveries for direct costs
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 days(27 days from discovery to filing)
Compliance flags: SEC 4-day late · 21d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
SEC
Materiality determined: May 7, 2024
→ Filed: May 28, 2024
21d cal. 4 business days SEC 4-day late

Statute	Window	Elapsed	Threshold	Status
SEC	Materiality determined: May 7, 2024 → Filed: May 28, 2024	21d cal.	4 business days	SEC 4-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 2 states

View merged incident ↗

SEC 8-KMay 7 · first

SEC 8-K+21d · this page

Maine State AG+91d

New Hampshire State AG+91d

Pattern: first filing May 7, last Aug 6 (NH) — a 91-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/790816/000119312524147625/d774339d8ka.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: May 28, 2024
Raw hash: 519ec0e43c59b73bc191ac4b2fc2106d51f0c9a5835c069d2dfebc127e3f15fa

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html34.9 KB

Download View at source

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityBRANDYWINE REALTY TRUST

Victim entityBRANDYWINE REALTY TRUST

Incidentdiscovered May 1, 2024

Stated responseInitiated previously established response protocols

ComplianceSEC 4-day late

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing