BRANDYWINE REALTY TRUST

Brandywine Realty Trust reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-08-14. 6 Massachusetts residents were affected.

Brandywine Realty Trust disclosed an external system breach (hacking) occurring between March 18, 2024 and May 1, 2024. The company discovered suspicious activity on May 1, 2024. Compromised data included names, SSNs, driver's license numbers, financial account info, and medical/health information. 2,934 individuals were affected, including 6 Maine residents. Notices were sent on August 6, 2024, offering 12 months of credit monitoring.

Brandywine Realty Trust notified New Hampshire residents of a security incident where an unauthorized actor accessed data between March 18 and May 1, 2024. The breach affected one NH resident's name and basic PII. Brandywine detected the activity on May 1, 2024, notified law enforcement, and offered credit monitoring via Experian/Cyberscout.

Brandywine Realty Trust (BDN) 8-K/A filed May 28, 2024. On May 1, 2024, a third party gained unauthorized access to portions of BDN's IT systems, deployed encryption, and exfiltrated files including personal information. Financial/operating reporting systems were disrupted. The third party has been removed and access restored. Investigation into personal information scope is ongoing; notifications to affected parties and regulators are planned.

On May 1, 2024, Brandywine Realty Trust detected a cybersecurity incident in which a third party gained unauthorized access to portions of its internal corporate IT environment and deployed encryption. The company confirmed that certain files were exfiltrated. The incident disrupted business applications including financial and operating reporting systems. The company contained the activity, engaged external cybersecurity experts, activated its incident response plan, shut down some systems, and notified law enforcement. Investigation ongoing.