Federal bankruptcy courts across the United States have been unable to send vital notices through the Bankruptcy Noticing Center (BNC) for a full week, following a significant cybersecurity incident that severely impacted the underlying infrastructure managed by defense and aerospace contractor BAE Systems.
The nationwide disruption has brought a critical administrative pipeline to a temporary halt. The BNC serves as the central nervous system for document distribution across every federal bankruptcy court in the country, processing and disseminating millions of official notices to creditors, debtors, trustees, and other parties involved in bankruptcy proceedings. Because BAE Systems operates this critical infrastructure as an outsourced contractor for the federal judiciary, the cyber incident immediately rippled across the entire federal bankruptcy system.
The Administrative Office of the US Courts confirmed the gravity of the situation on a Thursday, announcing that the security event had disabled the center entirely, preventing it from generating or transmitting any official notices.
"As a result of the incident, all access to the BNC systems and websites that BAE operates on behalf of the judiciary and the related bankruptcy noticing process are unavailable at this time," the Administrative Office stated in a formal operational update released to the public and court stakeholders.
Among the specific services knocked offline is the National Creditor Registration Service. While this platform remains dark, legal professionals and users of the federal courts’ electronic filing system have found themselves unable to generate the comprehensive creditor mailing lists that are normally required to properly serve legal documents in ongoing cases. Without access to these standardized mailing matrices, attorneys and court administrators face logistical hurdles in ensuring that all interested parties receive timely and legally mandated updates regarding active bankruptcy filings.
According to specific documentation published by the US Bankruptcy Court for the Eastern District of Texas, BAE Systems first alerted the Administrative Office to the underlying operational anomalies late on October 9. The sudden technological failure struck both BAE’s heavy-duty notice-processing back-end systems and the public-facing BNC websites, cutting off administrative access and external visibility alike.
In the immediate aftermath of the discovery, individual bankruptcy courts began addressing the technical failure locally. Several jurisdictions posted informational alerts on October 13, characterizing the situation broadly as a service disruption or technical interruption. Notably, these initial court-issued notices stopped short of mentioning a cybersecurity incident, focusing instead on informing local practitioners that normal noticing procedures were temporarily experiencing delivery delays.
Behind the scenes, the Administrative Office of the US Courts confirmed that it remains in active, continuous contact with the affected courts nationwide while simultaneously coordinating technical remediation efforts with BAE Systems. According to judiciary officials, the contractor has launched a formal, comprehensive internal investigation into the incident and is deploying technical teams around the clock to restore the compromised systems to a secure operating state.
A spokesperson for BAE Systems confirmed the nature of the event in a statement provided to security publication SecurityWeek, noting that the company is "aware of a security incident that is isolated to the BNC system." The spokesperson emphasized that BAE’s security teams responded immediately upon detecting the anomaly and are working in close, continuous partnership with the Administrative Office to resolve the disruption as rapidly and securely as possible.
Despite these assurances, critical questions remain unanswered. Neither the federal judiciary nor BAE Systems has publicly disclosed the precise root cause of the incident, whether it was precipitated by a malicious cyberattack such as ransomware or unauthorized network intrusion, or whether any sensitive court data, debtor information, or creditor records were compromised or exfiltrated during the breach. SecurityWeek reached out to BAE Systems with specific inquiries regarding these potential security implications, but the company’s official statement did not address those points.
As the technical remediation efforts drag on, the courts have issued clear warnings regarding the status of legal documentation. Both paper and electronic notices that were scheduled for issuance through the BNC center since October 9 have failed to reach their intended recipients, creating potential questions regarding statutory deadlines and notice requirements in active litigation.
However, court operations have not ground to a complete halt. Essential day-to-day functions continue to operate with specific workarounds. Electronic filing notifications directed specifically to registered attorneys, case trustees, and the US Trustee are still functioning and being distributed successfully. Furthermore, federal bankruptcy courts continue to accept new filings, process incoming legal documents, and open fresh bankruptcy cases on behalf of petitioners.
At present, federal authorities and BAE Systems have not provided a firm estimated restoration date for the BNC platform, leaving legal professionals and court administrators to navigate the ongoing administrative bottleneck while remediation efforts continue.
