BRANDYWINE REALTY TRUST

Brandywine Realty Trust experienced an external breach where an unauthorized actor accessed data between March 18–May 1, 2024. Discovered July 1, 2024. Affected data: names, SSNs, driver's license numbers, financial account info, medical info, health insurance, and occupational health data. 6 Maine residents affected (2,934 total). Notices sent August 6, 2024; 12-month credit monitoring offered.

Brandywine Realty Trust notified New Hampshire residents of a security incident where an unauthorized actor accessed data between March 18 and May 1, 2024. The breach affected one NH resident's name and basic PII. Brandywine detected the activity on May 1, 2024, notified law enforcement, and offered credit monitoring via Experian/Cyberscout.

Brandywine Realty Trust (BDN) 8-K/A filed May 28, 2024. On May 1, 2024, a third party gained unauthorized access to portions of BDN's IT systems, deployed encryption, and exfiltrated files including personal information. Financial/operating reporting systems were disrupted. The third party has been removed and access restored. Investigation into personal information scope is ongoing; notifications to affected parties and regulators are planned.

On May 1, 2024, Brandywine Realty Trust detected a cybersecurity incident in which a third party gained unauthorized access to portions of its internal corporate IT environment and deployed encryption. The company confirmed that certain files were exfiltrated. The incident disrupted business applications including financial and operating reporting systems. The company contained the activity, engaged external cybersecurity experts, activated its incident response plan, shut down some systems, and notified law enforcement. Investigation ongoing.