A severe, week-long service disruption has brought the federal bankruptcy court system’s noticing infrastructure to a standstill, creating significant logistical hurdles for the judiciary, legal professionals, and creditors across the United States. The outage, which originated from a cybersecurity incident affecting BAE Systems—the contractor responsible for operating the Bankruptcy Noticing Center (BNC)—has effectively severed the communication pipeline used to distribute critical legal notices to parties involved in insolvency proceedings.
The Bankruptcy Noticing Center serves as the centralized engine for the U.S. federal judiciary, handling the massive volume of notifications generated by bankruptcy courts nationwide. Because BAE Systems operates this critical infrastructure under contract, the company’s internal technical failures have cascaded into the public sector, halting the delivery of both paper and electronic notices. According to the Administrative Office of the U.S. Courts, the impact was immediate and absolute, leaving the system incapable of generating or transmitting the documents that underpin the due process requirements of federal bankruptcy law.
The disruption was first brought to the attention of the Administrative Office by BAE Systems late on October 9. In the days that followed, the scale of the failure became apparent, affecting not only the BNC’s internal notice-processing systems but also the public-facing BNC websites. By October 13, various federal bankruptcy courts began issuing public alerts to warn stakeholders of the situation. Initially, these alerts were framed as general "service disruptions" or "system interruptions," with most courts omitting specific references to a cybersecurity incident, a detail that only surfaced as the severity of the situation became clear in the following days.
Systemic Impact on Court Operations
The scope of the outage extends beyond simple notifications. One of the most significant casualties of the incident is the National Creditor Registration Service (NCRS). This service is a vital component of the courts’ electronic filing infrastructure, allowing creditors to manage how they receive notices from various courts. While the system remains offline, attorneys and legal staff using the federal judiciary’s electronic filing systems are unable to generate the creditor mailing lists required to serve legal documents. Without these lists, practitioners are facing substantial delays in ensuring that bankruptcy filings reach the appropriate parties, which is a fundamental requirement of the bankruptcy process.
Despite these challenges, the judiciary has maintained a baseline level of functionality. The Administrative Office confirmed that while the BNC is down, electronic filing notifications sent directly to registered attorneys, trustees, and the U.S. Trustee remain operational. Furthermore, bankruptcy courts across the country are continuing to accept new filings and open new cases, effectively keeping the doors of the justice system open even while the administrative machinery behind the scenes is impaired. However, the lack of BNC functionality means that any notice scheduled for distribution via that channel since October 9 has been effectively trapped in the system.
In a formal statement provided to the Administrative Office, the judiciary noted, “As a result of the incident, all access to the BNC systems and websites that BAE operates on behalf of the judiciary and the related bankruptcy noticing process are unavailable at this time.” The statement highlights the deep integration between the contractor’s infrastructure and the court’s daily operations, a reliance that has now become a focal point of concern for legal professionals who rely on the reliability of these federal systems.
Investigation and Response
The silence from both the judiciary and BAE Systems regarding the specific nature of the "cybersecurity incident" has sparked questions regarding the integrity of the data handled by the BNC. As of this writing, neither party has disclosed whether the disruption was the result of a targeted cyberattack, such as ransomware or a breach of data, nor have they confirmed if any sensitive personal or financial information managed by the BNC has been compromised.
In response to inquiries from SecurityWeek, a spokesperson for BAE Systems confirmed the company’s awareness of the situation, characterizing the event as a “security incident that is isolated to the BNC system.” The spokesperson emphasized that the company mobilized a response immediately upon discovering the issue and is working in close coordination with the Administrative Office of the U.S. Courts. However, the statement provided by the firm notably avoided addressing specific questions about the cause of the incident or the status of sensitive data, maintaining a cautious stance as the investigation continues.
The Administrative Office is currently working with the affected courts to manage the fallout and is coordinating with BAE Systems as they attempt to remediate the vulnerabilities and restore full functionality to the BNC. However, there is no current timeline for when the systems will return to normal operation. This lack of a definitive restoration date leaves court clerks, bankruptcy attorneys, and creditors in a state of uncertainty, forcing many to consider alternative, manual methods for serving notice that comply with local court rules during this period of forced digital inactivity.
Broader Context of Judiciary Cybersecurity
The current outage at the BNC is not an isolated event in the landscape of federal court security. The judicial branch has faced an increasing number of threats targeting its technological infrastructure in recent years. The vulnerability of third-party contractors and the potential for large-scale data theft have become central concerns for the Administrative Office.
For instance, this incident follows a major security breach involving Arizona’s court system, which resulted in the theft of personal information belonging to over one million individuals. In another notable case, a Tennessee man pleaded guilty to repeatedly hacking the Supreme Court’s electronic filing system, highlighting the persistent interest that malicious actors have in the documents and data contained within the federal court registry. Furthermore, the federal government has been actively engaged in a broader effort to secure the court’s digital supply chain, including crackdowns on illicit IT labor operations, such as the recent arrest of individuals involved in North Korean-linked “laptop farms.”
These previous incidents underscore the sensitivity of the data handled by federal contractors like BAE Systems. While the current bankruptcy notice outage may be limited to the BNC, it serves as a stark reminder of the potential for cascading failures when third-party service providers manage the critical infrastructure of the U.S. legal system. As the investigation into the BAE Systems incident progresses, the legal community remains expectant for answers regarding the cause, the extent of any data exposure, and the measures being taken to prevent such a widespread disruption from recurring.
For now, the federal bankruptcy courts continue to operate in a state of contingency. Legal professionals are advised to monitor the websites of their respective local districts for updates and instructions on how to proceed with service requirements while the BNC remains offline. The judiciary has promised to keep the public and the legal community informed as more information becomes available, but the immediate priority remains the restoration of the BNC’s ability to generate and deliver the critical notices that keep the bankruptcy process functioning. Until then, the administrative gears of the nation’s bankruptcy courts remain stalled, awaiting the resolution of an incident that has tested the resilience of the judiciary’s digital operations.
