FEDERALItem 1.05 · mandatoryMalwareFinancial ServicesFinanceTrusts & EstatesRansomwareData ExfiltratedData EncryptedRansom DemandedLowContained

BRANDYWINE REALTY TRUST

bd_79f5ce124da11bbb · schema v1 · pii pii-v1

Severity

Low

Discovered

May 1, 2024

Filed

May 7, 2024

To disclose

6 days

Affected

Not disclosed

Linked

4 filings

Confidence

84%

Full breach record for BRANDYWINE REALTY TRUST →2 incidents on file

On May 1, 2024, Brandywine Realty Trust detected a cybersecurity incident in which a third party gained unauthorized access to portions of its internal corporate IT environment and deployed encryption. The company confirmed that certain files were exfiltrated. The incident disrupted business applications including financial and operating reporting systems. The company contained the activity, engaged external cybersecurity experts, activated its incident response plan, shut down some systems, and notified law enforcement. Investigation ongoing.

J jump to incidentP pin to compareR raw source

SEC clockMateriality determined May 1, 2024 → Filed May 7, 20246d ✓ SEC 4-day OK6 days discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 6 days

May 1, 2024

Discovered

May 7, 2024

Filed

vs. sector median

8 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

SEC 8-Kbd_0bc387070c5ab1532024-05-28 · +21dVerified
Maine State AGbd_86c1cfa30c6cc5342024-08-06 · +91dVerified by operator
New Hampshire State AGbd_a906e7bd411f874d2024-08-06 · +91dVerified by operator

Name: BRANDYWINE REALTY TRUST
norm: brandywine realty
SEC CIK: 0000790816
Domain: brandywinerealty.com
Industry: Real Estate Investment Trust

Name: BRANDYWINE REALTY TRUST
norm: brandywine realty
SEC CIK: 0000790816
Domain: brandywinerealty.com
Industry: Real Estate Investment Trust
Industry: Financial Servicesnaics map
NAICS 525920 · Trusts, Estates, and Agency Accounts

Discovered: May 1, 2024
Materiality determined: May 1, 2024
Notification sent: —
Affected individuals: Not disclosed
Data types: —
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial

During the incident: Initiated previously established response protocols
Began an investigation with leading external cybersecurity experts
Activated its incident response plan
Shutting down some systems
Notifying law enforcement
Changes made: Working diligently to bring the impacted portions of its IT systems back online
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 days(6 days from discovery to filing)
Compliance flags: SEC 4-day OK · 6d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
SEC
Materiality determined: May 1, 2024
→ Filed: May 7, 2024
6d cal. 4 business days SEC 4-day OK

Statute	Window	Elapsed	Threshold	Status
SEC	Materiality determined: May 1, 2024 → Filed: May 7, 2024	6d cal.	4 business days	SEC 4-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 2 states

View merged incident ↗

SEC 8-KMay 7 · first · this page

SEC 8-K+21d

Maine State AG+91d

New Hampshire State AG+91d

Pattern: first filing May 7, last Aug 6 (NH) — a 91-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/790816/000119312524133132/d824906d8k.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: May 7, 2024
Raw hash: 7ab164a99bfa24c113a2016c7d06ce3116ad6f2b47b152cf42656266f1b3dba0

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html38.3 KB

Download View at source

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityBRANDYWINE REALTY TRUST

Victim entityBRANDYWINE REALTY TRUST

Incidentdiscovered May 1, 2024

Stated responseInitiated previously established response protocols

ComplianceSEC 4-day OK

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing