Incident Response
BAE Systems Cyber Incident Disrupts US Bankruptcy Court Notices
A security incident at BAE Systems has halted the delivery of bankruptcy court notices across the US for over a week, affecting legal processes nationwide.
Ross Grant3 min read
The short version
A security problem at BAE Systems has stopped US bankruptcy courts from sending out important notices for over a week. The system that handles these notices is offline, and it is not clear yet what caused the problem or if any data was stolen. Courts are still open, but people involved in bankruptcy cases may not be getting updates as usual.
What happened?
A cybersecurity incident at BAE Systems has caused the US Bankruptcy Noticing Center (BNC) to stop sending notices nationwide for over a week. The BNC, which BAE operates for the federal judiciary, is offline along with related services. The cause and scope of the incident are still under investigation.
What is the Bankruptcy Noticing Center and Who Runs It?
The Bankruptcy Noticing Center (BNC) is a service that sends official notices for every federal bankruptcy court in the United States. BAE Systems, a major defence and technology contractor, operates the BNC as a service provider for the judiciary. When someone files for bankruptcy, the BNC is responsible for making sure all parties, creditors, attorneys, trustees, are notified about key developments in the case.
Timeline: How the Outage Unfolded
According to SecurityWeek (opens in a new tab), BAE Systems first alerted the Administrative Office of the US Courts about a problem late on 9 October. The issue affected both the systems that process notices and the websites that support the BNC. By 13 October, several bankruptcy courts had posted notices about a service disruption, but did not mention a cybersecurity incident. The Administrative Office later confirmed that the outage was due to a security incident affecting BAE's infrastructure.
What Is the Impact on Courts and the Public?
For over a week, federal bankruptcy courts have been unable to send out notices through the BNC. This means that people involved in bankruptcy cases, creditors, lawyers, and others, may not be receiving important updates or legal documents. The National Creditor Registration Service, which helps generate mailing lists for these notices, is also offline. However, courts are still accepting new filings and opening cases, and electronic notifications to registered attorneys and trustees are still being sent.
What Has BAE Systems Said?
A BAE Systems spokesperson told The Record that the incident is isolated to the BNC system. The company said it responded immediately and is working with the Administrative Office to restore services. Neither BAE nor the judiciary has confirmed the cause of the incident or whether any data was compromised. SecurityWeek reports that both parties are investigating and have not given an estimated date for when the systems will be back online.
What Happens Next?
The Administrative Office is coordinating with BAE Systems and affected courts to restore services. Until the BNC is back online, notices will not be delivered through the usual channels. Courts have warned that any paper or electronic notices issued since 9 October have not been delivered. There is no public information yet about the cause of the incident, whether it was a cyberattack, or if any sensitive information was accessed.
Practical Advice for Those Affected
If you are involved in a bankruptcy case, check with your court or legal representative for updates. Do not assume that you have received all necessary notices. Courts are still operating, but the usual notification process is disrupted. Stay alert for further announcements from the courts or BAE Systems.
Claimed vs confirmed
- Unconfirmed
The incident was a cyberattack that compromised data.
Neither BAE Systems nor the judiciary has said what caused the incident or whether any data was compromised. SecurityWeek has asked BAE for comment.
The impact
- Money
- The cost to BAE Systems or the courts is not yet known. If data was exposed, US law may require notification and could lead to fines or lawsuits.
- Reputation
- The incident may affect trust in BAE Systems and the judiciary's reliance on contractors for critical services. The outage is visible to all US bankruptcy courts and their users.
- Customers
- People involved in bankruptcy cases may not receive important legal notices. They should check with their court or legal representative for updates and not assume all communications are being delivered.
Why it matters
This incident affects anyone involved in US bankruptcy cases, including individuals, businesses, creditors, and legal professionals. Missing or delayed notices can disrupt legal processes and affect people's rights. It also highlights the risks of relying on third-party contractors for critical government services.
How does it work?
The sources do not explain the technical details of the incident. It is only described as a security incident affecting BAE's infrastructure that runs the BNC.
Key points
- A security incident at BAE Systems has halted US bankruptcy court notices for over a week.
- The cause and scope of the incident are not yet public.
- No evidence yet of data compromise, but investigations are ongoing.
- Legal processes may be delayed or disrupted for those involved in bankruptcy cases.
- The incident shows the importance of secure, resilient systems for critical public services.
Sources
SecurityWeek
Reference
