CSIDB logo
Threat actor

Brian Noe

Attribution profile

Type
Insider - Disgruntled
Location
United States of America
Known incidents
1 incident
First seen
2020-12-18
Last seen
2020-12-18
Updated
2026-07-31 19:03
Aliases
1 alias

STIX characteristics

Threat actor characteristics are available to members.

Profile narrative

Brian Noe, also known by the alias Brian Noe, is an individual identified in a United States‑based legal case involving the alleged theft of client data from a mortgage brokerage. The actor is described as a former senior loan processor who was employed by Smart Mortgage before moving to a competing firm, NEXA Mortgage. The incident occurred in December 2020, when Smart Mortgage filed lawsuits in both federal and Illinois state courts accusing Noe of taking a database containing names and personal information upon his departure.

The alleged activity targeted the mortgage brokerage sector, specifically affecting Smart Mortgage’s operations across multiple states including Illinois, Indiana, Colorado, and Florida. According to the lawsuit, the strategic objective behind the data transfer was to provide a competitive advantage to the new employer by utilizing the stolen client information. No evidence in the publicly available sources points to espionage, disruption, or any other motive beyond the claimed financial benefit to the receiving organization.

The described tactics involve an insider threat vector, wherein the actor allegedly exfiltrated a client database while leaving the original employer and subsequently transferred the data to a new employer. No malware families, exploit tools, or specific technical tooling are referenced in the available reporting, and the method appears to rely solely on the misuse of legitimate access privileges. No public attribution links the actor to any state‑sponsored group, criminal consortium, or broader affiliate network, and the case remains confined to the civil litigation context.

The most notable publicly reported operation associated with this individual is the Smart Mortgage lawsuit filed on December 18, 2020, which alleges the unauthorized removal and use of a client database. This case represents the sole documented incident linking Brian Noe to data theft activity, and no additional campaigns or operations have been reported in the sources provided. The legal proceedings continue to address the claims of data misuse and its impact on the plaintiff’s business operations across the stated jurisdictions.

Incidents

Attributed incidents are available to members.

1 incident
CSIDB