Explanatory Note
This Current Report on
Form 8-K/A (this
“Amendment”) amends the Current Report on
Form 8-K previously
filed by Brandywine Realty Trust and Brandywine Operating Partnership, L.P. (collectively, the “Company”) with the Securities and Exchange Commission on May 7, 2024 (the “Original Report”). The Company is filing this Amendment in order to provide supplemental information under Item 1.05 regarding the cybersecurity incident disclosed by the Company in Item 1.05 of the Original Report (the “cybersecurity incident”). Except as expressly set forth herein, this Amendment does not amend the Original Report. This Amendment supplements, and should be read in conjunction with, Item 1.05 of the Original Report.
Item 1.05 Material Cybersecurity Incidents
As disclosed in the Original Report, on May 1, 2024, the Company detected unauthorized occurrences by a third party on portions of the Company’s information technology (“IT”) systems. Upon detecting the unauthorized occurrences, the Company promptly initiated its previously established response protocols and began taking steps to contain, assess and remediate the cybersecurity incident, including beginning an investigation with leading external cybersecurity experts, activating its incident response plan, shutting down portions of the IT systems and notifying law enforcement.
The detected occurrences consisted of the third party’s unauthorized access to, and deployment of encryption to, a portion of the Company’s internal corporate IT systems and the exfiltration of certain files, including files containing personal information. The cybersecurity incident caused disruptions, and limitation of access, to portions of the Company’s business applications supporting aspects of the Company’s operations and corporate functions, including financial and operating reporting systems. The Company’s real estate operations have continued throughout the period since the detection of the cybersecurity incident in all material respects.
As a result of the Company’s remediation and other activities, as of the date this Amendment, the Company believes that (i) the third party has been removed from the Company’s IT systems, (ii) the Company’s access to the affected information has been restored and (iii) the procedures performed have confirmed the completeness and integrity of the impacted information.
The Company’s investigation of the cybersecurity incident, including the Company’s assessment of the scope of personal information included in the exfiltrated information, remains ongoing. The Company intends to provide required notifications to affected and potentially affected parties and to regulatory agencies.
As part of its remediation activities, the Company is evaluating additional procedures and software to strengthen its surveillance of cybersecurity threats and to prevent unauthorized occurrences on or conducted through its IT systems and to strengthen its information backup systems. The Company currently expects that a substantial portion of its direct costs incurred