A cybersecurity incident affecting BAE Systems has disrupted a key service used by federal bankruptcy courts across the United States, halting the production and delivery of official bankruptcy notices nationwide.
The affected system is the Bankruptcy Noticing Center, or BNC, which prepares and distributes electronic and paper notices for bankruptcy courts across the country.
BAE Systems operates the service on behalf of the US federal judiciary.
The Administrative Office of the US Courts said all access to BNC systems and related websites remains unavailable while BAE investigates the incident and works to restore operations.
FCRF Launches CP-FRM to Build India’s Next Generation of Fraud Risk Professionals
Bankruptcy Notices Have Been Disrupted Since October 9
The disruption began on October 9, when BAE Systems informed the judiciary that systems supporting the Bankruptcy Noticing Center were experiencing problems.
Several federal bankruptcy courts later issued notices warning lawyers, creditors and other users that official court notices could be delayed.
The BNC normally handles large volumes of routine communications generated during bankruptcy proceedings.
These can include notices about hearings, filing deadlines, creditor meetings, court orders and other developments that parties need to receive on time.
The outage has stopped the BNC from producing and distributing those notices electronically and by post.
Several related websites have also gone offline, including the Bankruptcy Noticing Center portal, the electronic bankruptcy notices service and the National Creditor Registration Service.
However, the wider bankruptcy court system has not completely shut down.
Courts in several districts have said their CM/ECF electronic filing systems remain operational, meaning lawyers can still file cases and documents.
The problem mainly affects how official notices are generated and delivered.
What the Bankruptcy Noticing Center Does
The Bankruptcy Noticing Center acts as a central delivery system for US federal bankruptcy courts.
Instead of each court separately printing and mailing every notice, the judiciary uses the BNC to process large volumes of electronic and physical communications.
That makes the system an important part of the bankruptcy process.
A bankruptcy case can involve debtors, banks, employees, landlords, suppliers and hundreds or even thousands of creditors.
Each may need to be informed when hearings are scheduled, deadlines change or important orders are entered.
If notices are delayed, parties may not receive information quickly enough to respond.
Some courts have already warned that deadlines or hearings may need to be extended or rescheduled where the outage creates practical problems.
The Northern District of Texas, for example, said parties could request relief if the service interruption affects their ability to meet a deadline or participate in proceedings.
BAE Says Incident Is Isolated to BNC System
BAE Systems has said the security incident is isolated to the Bankruptcy Noticing Center environment.
The company says it took immediate steps to contain the problem and is coordinating with the federal judiciary.
Neither BAE nor the Administrative Office has publicly identified the type of cyberattack.
There has also been no public confirmation that ransomware was involved or that sensitive court data was stolen.
That distinction matters.
A service outage can result from a cyberattack without necessarily involving theft of personal or financial information.
Investigators will need to determine how the attackers gained access, what systems were affected and whether any information was viewed, copied or removed.
For now, the confirmed impact is operational.
The BNC cannot perform its normal notice-processing functions, and there is no publicly announced restoration date.
Third-Party Contractors Remain a Major Cyber Risk
The incident highlights a broader cybersecurity problem faced by governments and large organisations.
A critical public service can depend on technology operated by an outside contractor.
If that contractor is compromised, the disruption can spread into systems used by courts, government agencies or businesses even when the primary organisation itself was not directly breached.
This is known as third-party or supply-chain risk.
Governments increasingly require contractors to meet strict cybersecurity standards because attackers may target vendors as an easier route into sensitive services.
The bankruptcy court disruption is especially notable because it affects a system used across the entire federal judiciary rather than a single district.
The incident also comes as courts worldwide become more dependent on digital filing, notification and case-management systems.
That dependence improves efficiency but creates new points of failure when systems are taken offline.
BAE and the judiciary are continuing to investigate the incident.
Until services are restored, bankruptcy courts may need to rely on manual mailing and other temporary processes to ensure parties receive legally required notices.
What this means for you:
Lawyers, creditors and parties involved in US bankruptcy cases should not assume a missing electronic notice means nothing has happened. They should check court dockets directly while the BNC outage continues.
Follow for daily updates on cybercrime, corporate fraud, DFIR, hacking, investigations, and digital forensics
