Cyber Threat Actor: Brian Noe

BrianNoe, also known by the alias Brian Noe, is an individual identified in a civil lawsuit filed in December 2020. He was employed as a senior loan processor at Smart Mortgage, a mortgage brokerage that operates in several states including Illinois, Indiana, Colorado and Florida. The lawsuit alleges that after leaving Smart Mortgage, Noe took a copy of the company's client database with him when he began working at NEXA Mortgage. No public record indicates any other aliases or alternative names associated with him. His known location is within the United States, reflecting the domestic operations of the companies involved.

Smart Mortgage alleges that the stolen database contained names and personal information of its clients, which constitutes sensitive personal data. The firm contends that the removal of this information was intended to give NEXA Mortgage an unfair competitive advantage in the mortgage lending market. The legal action was filed simultaneously in federal court in Illinois and in an Illinois state court, reflecting parallel claims of misappropriation. Smart Mortgage operates across multiple states, so the alleged data theft could affect customers in Illinois, Indiana, Colorado and Florida. The lawsuit characterizes the conduct as a financial motive rather than espionage or disruption, seeking damages for the alleged harm to its business. According to the complaint, the alleged transfer of the client database occurred when Noe joined NEXA Mortgage, and the brokerage pursued legal remedies to recover the data and prevent further use. The case highlights how employee departures can lead to disputes over proprietary customer information in the financial services sector. No technical details such as malware, hacking tools or specific intrusion methods are described in the publicly available filing; the allegations focus solely on the alleged copying and removal of data. The outcome of the litigation has not been detailed in the source material, leaving the resolution of the claims unspecified. This incident represents the only publicly reported operation linked to Brian Noe in the available sources.