BAE Systems cyber incident knocks out US federal courts' Bankruptcy Noticing Center for over two weeks; service restored Oct 26
Matéria consolidada. Reúne 4 matérias que o Tifon tinha publicado separadamente sobre a mesma história. A IA reescreveu o relatório com o que as 4 fontes trouxeram em 30/10/2026 00:02; os links antigos trazem para cá.
Fontes: securityweek.com ↗ infosecurity-magazine.com ↗ cyberscoop.com ↗ theregister.com ↗
A cybersecurity incident at contractor BAE Systems, Inc. took offline the Bankruptcy Noticing Center (BNC), which BAE operates for the Administrative Office of the U.S. Courts (AOUSC). Notice production and distribution (paper and electronic) for all federal bankruptcy courts stopped from around October 9, 2026 (theregister.com, cyberscoop.com, securityweek.com). AOUSC publicly called it a cybersecurity incident on October 15 (infosecurity-magazine.com, cyberscoop.com). The Judicial Conference declared a "Bankruptcy Rules emergency" on October 22 so judges could extend deadlines (securityweek.com). The BNC resumed operations on October 26 and began clearing the backlog oldest first, and AOUSC confirmed availability on October 27 (securityweek.com). A BAE spokesperson told SecurityWeek that no other systems were affected, no data was extracted and no PII was breached. BAE has still not disclosed the cause or confirmed that this was a cyberattack, and no ransomware or cybercrime group has claimed it (securityweek.com).
Detalhes técnicos
- Affected services: bnc.uscourts.gov, bankruptcynotices.uscourts.gov, notices.uscourts.gov and the National Creditor Registration Service (theregister.com, cyberscoop.com).
- The BNC is the single channel through which all US federal bankruptcy courts send notices, so the outage had a nationwide effect (securityweek.com).
- Courts kept accepting filings, opening cases and processing documents, but notice and order entry and service could be delayed (theregister.com, cyberscoop.com).
- Address lookups in the courts' electronic filing system might omit addresses registered through the BNC's Electronic Bankruptcy Noticing program or the National Creditor Registration Service, so some parties entitled to notice could be missing from service lists (cyberscoop.com).
- The Bankruptcy Court for the Eastern District of Texas issued a general order extending by 30 days any stay delay for cases filed on or after September 14 with an active motion to stay (theregister.com).
- The initial October 13 notice on the US Bankruptcy court website described a "nationwide service interruption" without mentioning cyber activity. The October 15 statement was the first to call it a cybersecurity incident (cyberscoop.com).
- No attack vector, malware, IOCs or threat actor have been disclosed by any source.
- Cyberscoop.com notes this would be the second incident affecting US Courts in as many years, after a major 2025 breach of the judiciary's electronic case filing system. Theregister.com places it among other recent attacks on US public-sector and judicial bodies.
Remediação
- No patches or customer-side technical mitigations were published. BAE investigated and restored operations in coordination with AOUSC, which stayed in contact with the affected courts.
- Cyberscoop.com reports that the Clerk of Court advised serving parties to look up creditor and party addresses in the electronic filing system and compare the two lists to make sure no one is missing.
- Affected parties should follow court-issued guidance, expect delayed notices while the backlog clears, and watch for deadline extensions under the Judicial Conference emergency declaration.
Relatos divergentes
- Start date: Infosecurity-magazine.com gives no start date. Theregister.com (citing the Eastern District of Texas court), cyberscoop.com and securityweek.com put it at about October 9. Cyberscoop.com says the first public notice was dated October 13.
- Data exposure: The October 16 reports (infosecurity-magazine.com, theregister.com, cyberscoop.com) said data access was unknown. The later securityweek.com (October 29) quotes BAE saying no data was extracted and no PII was breached. This is a vendor statement without published technical evidence, and the later source is the more current.
- Nature of incident: AOUSC called it a cybersecurity incident, but securityweek.com says BAE has still not confirmed a cyberattack or the cause. Infosecurity-magazine.com notes there is no confirmation of ransomware or data theft.
- Affected services: Infosecurity-magazine.com lists only bankruptcynotices.uscourts.gov and the National Creditor Registration Service. Theregister.com and cyberscoop.com list four services including bnc.uscourts.gov and notices.uscourts.gov, so the larger list is more complete.
Linha do tempo
-
BAE Systems restores US Bankruptcy Noticing Center after two-week outage, says no data was taken
ler a análise desta fonte ocultar
BAE Systems, Inc. has restored the US federal judiciary's Bankruptcy Noticing Center (BNC), which it operates under contract with the Administrative Office of the U.S. Courts (AOUSC), after a cybersecurity incident took it offline for more than two weeks starting around October 9, 2026. A BAE spokesperson told SecurityWeek that no other systems were affected, no data was extracted and no PII was breached. The company still has not disclosed the cause of the incident or confirmed whether it was a cyberattack. The BNC resumed operations on October 26 and began clearing the backlog of delayed bankruptcy notices, oldest first, with AOUSC confirming availability on October 27. No ransomware or cybercrime group has publicly claimed responsibility.
Technical Details
The BNC is the single channel through which all US federal bankruptcy courts transmit notices; its outage halted notice delivery nationwide. In response, the Judicial Conference declared a "Bankruptcy Rules emergency" on October 22, allowing judges to extend deadlines and suspend time periods to mitigate fallout. No technical indicators, malware families or attribution have been released.
-
BAE Systems cyber incident takes down US federal courts' Bankruptcy Noticing Center, halting nationwide bankruptcy notices
ler a análise desta fonte ocultar
A cybersecurity incident at US government contractor BAE Systems has knocked out the systems behind the Bankruptcy Noticing Center (BNC), which generates and distributes bankruptcy notices for all federal bankruptcy courts in the US. The Administrative Office of the US Courts (AOUSC) confirmed on October 15 that BNC IT systems and websites are impacted. BAE operates the BNC infrastructure on behalf of the Federal Judiciary, and notice production and distribution has stopped nationwide. BAE says the incident is isolated to the BNC system and that it is investigating and working to restore operations in coordination with AOUSC. The nature of the incident, its start date, any data access or exfiltration, and a restoration timeline have not been disclosed.
Technical Details
- Unavailable services include bankruptcynotices.uscourts.gov and the National Creditor Registration Service.
- The attack vector, malware and threat actor have not been disclosed. There is no confirmation of ransomware or data theft.
- A BAE spokesperson described it as a security incident "isolated to the BNC system".
Remediation
- No customer-side remediation has been published. Affected courts are in contact with AOUSC.
- Organizations that rely on BNC notices should monitor AOUSC communications for restoration updates and alternative notice procedures.
-
BAE Systems cybersecurity incident halts Bankruptcy Noticing Center operations for all US federal bankruptcy courts
ler a análise desta fonte ocultar
A cybersecurity incident at defense contractor BAE Systems has stopped the production and delivery of bankruptcy notices for every US federal bankruptcy court. BAE operates the Bankruptcy Noticing Center (BNC) systems and websites on behalf of the federal judiciary. The Administrative Office of the U.S. Courts confirmed the incident on Oct. 15, saying it affected BAE's IT and the websites supporting the BNC. Notice production and distribution, both paper and electronic, have been halted since Oct. 9. As of Friday the sites were still offline and no restoration date has been announced. No cause has been identified, and the article does not say whether any data was accessed. BAE says the incident is isolated to the BNC system and that no other systems are affected.
Technical Details
- Offline services: bnc.uscourts.gov, bankruptcynotices.uscourts.gov, notices.uscourts.gov and the National Creditor Registration Service.
- The initial Oct. 13 notice on the US Bankruptcy court website described a "nationwide service interruption" and did not mention cyber activity. The Oct. 15 statement was the first to call it a cybersecurity incident.
- Neither announcement identified a cause, said whether information was accessed, or gave a restoration estimate. No threat actor, malware or IOCs have been disclosed.
- Courts are still accepting new filings, opening cases and processing paperwork.
- Address lookups in the courts' electronic filing system may omit addresses registered through the BNC's Electronic Bankruptcy Noticing program or the National Creditor Registration Service. Some parties entitled to notice may therefore be missing from service lists.
- The article notes this would be the second incident affecting US Courts in as many years, after a major 2025 breach of the judiciary's electronic case filing system.
Remediation
- BAE Systems is investigating and working to restore operations, and the Administrative Office is in contact with the affected courts.
- The Clerk of Court advises serving parties to look up creditor and party addresses in the electronic filing system and compare the two lists to make sure no one is missing. The article gives no technical remediation guidance.
-
BAE Systems-run Bankruptcy Noticing Center hit by cyber incident, disrupting US federal bankruptcy courts
ler a análise desta fonte ocultar
The Administrative Office of the US Courts reported a "cybersecurity incident" affecting the Bankruptcy Noticing Center (BNC), which is operated by BAE Systems, Inc. for the Federal Judiciary. The BNC systems and websites were taken offline, halting the production and distribution of electronic and paper bankruptcy notices for federal bankruptcy courts nationwide. The Bankruptcy Court for the Eastern District of Texas indicated that problems began on October 9. BAE says the incident is isolated to the BNC system and that it is coordinating with AOUSC. The article gives no attribution, attack vector or data-theft details. It places the incident among other recent attacks on US public-sector and judicial bodies.
Technical Details
- Affected services: bnc.uscourts.gov, bankruptcynotices.uscourts.gov, notices.uscourts.gov and the National Creditor Registration Service.
- Courts continue to accept filings, open cases and process documents, but notice and order entry and service may be delayed.
- The Eastern District of Texas court issued a general order extending by 30 days any stay delay for cases filed on or after September 14 with an active motion to stay.
- The article states no threat actor, malware, initial access vector or data exposure.
Remediation
- No patches or mitigations are published. BAE is working to restore operations with AOUSC.
- Affected parties should follow court-issued guidance and watch for delayed notices.