Brandywine Realty Trust reports encryption and file theft on corporate IT systems

Brandywine Realty Trust, a Philadelphia office and life-science property owner, disclosed on May 7, 2024 that a third party had broken into part of its internal corporate IT systems on or before May 1 and deployed encryption. The company's property operations continued, but financial and operating reporting systems were disrupted.

First filing

Brandywine said the attack combined access with encryption. It confirmed that some files had been exfiltrated and was still checking what they contained.

May 28 amendment

The 8-K/A said the third party had been removed, access to affected information restored, and the exfiltrated files included personal information. The trust expected insurance to cover a substantial portion of direct costs. It reported no material financial impact.

Still open at the amendment

The scope of personal information and the number of people to be notified were still being assessed when the amendment was filed.