BAE Systems Cyberattack Takes Down Federal Bankruptcy Notice System
A cybersecurity incident at defense and IT contractor BAE Systems has knocked out the Bankruptcy Noticing Center (BNC), the system that produces and distributes bankruptcy case notices on behalf of every federal bankruptcy court in the United States. The Administrative Office of the U.S. Courts (AO) formally disclosed the incident on October 15, 2026, though court filings and individual district notices trace the outage back to October 9, 2026, when BAE Systems first notified the AO of a service disruption. As of October 16, the agency says it has no estimated date or time for restoration.
BAE Systems operates BNC systems and websites on behalf of the federal judiciary. A company spokesperson said BAE is "aware of a security incident that is isolated to the BNC system and have taken immediate steps to address it," and is "coordinating closely with" the AO. Neither the AO nor BAE has disclosed the attack vector, named a suspected threat actor, or confirmed whether any data was exfiltrated.
Incident Details
| Attribute | Value |
|---|---|
| Affected contractor | BAE Systems (operates BNC infrastructure for the federal judiciary) |
| Victim system | Bankruptcy Noticing Center (BNC) |
| Outage start | October 9, 2026 (per court notices) |
| Public disclosure | October 15, 2026 (Administrative Office of the U.S. Courts) |
| Affected domains | bnc.uscourts.gov, bankruptcynotices.uscourts.gov, notices.uscourts.gov |
| Also affected | National Creditor Registration Service |
| Scope | All federal bankruptcy courts nationwide |
| Suspected threat actor | Not disclosed |
| Attack vector | Not disclosed |
| Data theft confirmed | Unconfirmed — AO has not responded to requests for detail |
| Restoration ETA | None provided as of October 16, 2026 |
| Federal agencies contacted | CISA (referred inquiries back to the U.S. Courts); FBI has not commented |
What Happened
The Outage
Late on October 9, 2026, BAE Systems notified the Administrative Office of the U.S. Courts of a service disruption affecting the BNC's processing systems and public-facing websites. The BNC is the centralized back-end that generates and mails (or electronically transmits) bankruptcy notices — filing notices, hearing dates, claims-bar-date reminders, and discharge orders — for bankruptcy cases filed anywhere in the country. BAE Systems operates this infrastructure under contract to the judiciary, rather than the courts running it directly.
The outage took down bnc.uscourts.gov, bankruptcynotices.uscourts.gov, and notices.uscourts.gov, along with the National Creditor Registration Service, which creditors use to register addresses for notice delivery. With these systems offline, the BNC has been unable to produce or transmit new bankruptcy notices to any party in any case, nationwide.
What Still Works
Individual bankruptcy courts, including the Southern District of New York, have clarified the blast radius: the disruption affects only the BNC's notice-production pipeline. The separate CM/ECF (Case Management/Electronic Case Filing) system continues operating normally for docketing and filings, and Notices of Electronic Filing (NEF) — the automated email alerts CM/ECF sends to registered attorneys — continue to go out as usual. However, CM/ECF users have been unable to generate or print creditor mailing lists, a function that depends on BNC back-end data.
Disclosure Gap and Unanswered Questions
There is a notable gap between the October 9 outage and the October 15 public disclosure — six days during which affected courts were individually notified but the broader public, media, and creditors were not formally informed of a cybersecurity cause. The AO's public statement was limited: "The Administrative Office of the U.S. Courts has been in communication with the impacted courts and is also coordinating with BAE Systems. BAE is actively investigating this incident and working to restore operations." The agency has not responded to follow-up questions about the nature of the intrusion or whether any data was accessed or stolen. CISA referred inquiries back to the U.S. Courts, and the FBI has not commented.
Historical Context
This is not the judiciary's first brush with a serious cyber incident. A 2025 attack on federal judiciary systems compromised the CM/ECF case-management platform and the PACER public document system, reportedly exposing sensitive data including the identities of confidential informants in federal criminal cases. That incident involved judiciary-run infrastructure directly; the current BNC outage instead stems from a compromise at a third-party contractor, underscoring how deeply embedded commercial vendors are in day-to-day federal court operations.
Impact Assessment
| Impact Area | Description |
|---|---|
| Creditor notification failures | Creditors owed money by companies or individuals who filed for bankruptcy since October 9 may not know a case exists, since the notices that would normally alert them have not been produced or mailed. |
| Deadline and claims risk | Bankruptcy proceedings run on strict statutory deadlines (claims bar dates, objection periods, discharge timelines); a halted notice pipeline raises the risk that affected parties miss a deadline through no fault of their own. |
| National scope | The BNC serves all federal bankruptcy courts, so the outage is not isolated to one district or region — it is a nationwide single point of failure in the bankruptcy notice chain. |
| Third-party/supply-chain exposure | The incident illustrates how a single contractor compromise can cascade into a disruption of critical government functions, independent of the judiciary's own network security posture. |
| Transparency and trust | A six-day gap between the outage and public disclosure, combined with no confirmed attack vector, threat actor, or data-theft status, limits affected parties' ability to assess their own risk. |
| Potential data exposure | Unconfirmed, but the BNC processes personally identifiable information tied to bankruptcy filers and creditors; if the incident involved data access rather than pure availability loss, downstream notification obligations could follow. |
Recommendations
For Attorneys and Bankruptcy Filers
- Do not assume notice delivery is happening normally for any case touched by the BNC since October 9, 2026 — manually verify claims-bar dates, hearing dates, and other deadlines directly with the relevant court rather than relying on mailed or emailed notices.
- Continue to monitor CM/ECF directly for docket activity and NEF alerts, which the courts have confirmed are unaffected, but be aware that creditor-list generation and print functions tied to the BNC are currently unavailable.
- Check your local bankruptcy court's website for district-specific guidance, since several courts (including the Southern District of New York and others) have published their own outage notices with procedural workarounds.
For Creditors
- If you believe you may be owed money by a party that has filed, or may file, for bankruptcy, proactively check PACER/CM/ECF dockets rather than waiting for a BNC-generated notice, since production and distribution of those notices is currently halted.
- Confirm your registered address with the National Creditor Registration Service once it is restored, as service interruptions can also create backlog once systems come back online.
For Security Teams and Government IT Leaders
- Treat this as a reminder to inventory third-party contractor dependencies for mission-critical government functions; a single vendor's security incident can take down a nationwide service even when the agency's own network is unaffected.
- Push for contractual and operational transparency requirements with critical-infrastructure vendors — the six-day gap between the BAE Systems outage and public disclosure is a pattern worth addressing in incident-response SLAs for government contracts.
- Where a contractor runs public-facing .gov infrastructure, maintain a documented fallback or manual process for critical functions (such as statutory notice delivery) that can be invoked if the primary vendor system goes down for an extended period.
Key Takeaways
- A cyberattack on contractor BAE Systems has disabled the Bankruptcy Noticing Center, halting notice production and distribution for all federal bankruptcy courts since October 9, 2026.
- Affected systems include
bnc.uscourts.gov,bankruptcynotices.uscourts.gov,notices.uscourts.gov, and the National Creditor Registration Service; the separate CM/ECF docketing and NEF email-alert systems remain operational. - Neither the Administrative Office of the U.S. Courts nor BAE Systems has disclosed the attack vector, named a threat actor, or confirmed whether data was stolen.
- As of October 16, 2026, there is no restoration timeline, and there was a six-day gap between the outage and its public disclosure as a cybersecurity incident.
- The practical risk falls on creditors and bankruptcy filers, who may miss statutory deadlines because the notices that would normally alert them are not being produced or delivered.
- The incident follows a 2025 breach of judiciary-run CM/ECF and PACER systems, highlighting a pattern of cyber risk — now both internal and third-party — across US federal court infrastructure.