Skip to content

Back to the catalog

BAE Says No Data Extracted in Incident Hitting Bankruptcy Courts
securityweek.comarticle

BAE Says No Data Extracted in Incident Hitting Bankruptcy Courts

The Bankruptcy Noticing Center (BNC), operated by BAE Systems for the US federal judiciary, was restored after an incident that took it offline for more than two weeks from around 9 October 2026. BAE says no data was extracted and no PII was breached. It does not say what caused the incident or whether it was a cyberattack. The Judicial Conference declared a "Bankruptcy Rules emergency" on 22 October, and no group has claimed responsibility.

TL;DR BAE restores the federal bankruptcy courts' notice center after a two-week outage and says no data was taken, without naming a cause.
Document

What it is

The Bankruptcy Noticing Center (BNC) is the system through which all US federal bankruptcy courts send their notices. BAE Systems, Inc. operates it under contract with the federal judiciary. Notices stopped flowing around 9 October 2026, and the system was down for more than two weeks.

Timeline and scope

Bankruptcy court notices show the BNC came back on 26 October and began clearing the delayed notices, oldest first. On 27 October the Administrative Office of the US Courts (AOUSC) confirmed that, according to BAE, the problems were fixed and the BNC was available.

A BAE spokesperson told SecurityWeek that the BNC system has resumed operations, that no other systems were affected, that no data was extracted, and that there was no breach of any PII. These are BAE's claims. The page cites no independent verification.

What the emergency does

The Judicial Conference declared a "Bankruptcy Rules emergency" on 22 October. It lets bankruptcy judges push back deadlines, pause time periods and issue related orders to deal with the fallout.

Caveats

Neither BAE nor the judiciary has said what caused the incident or whether it was a cyberattack. When the incident first came to light, neither addressed whether data had been compromised. No ransomware or other cybercrime group appears to have publicly claimed responsibility.

The page does not say whether the emergency declaration has ended, and it gives no timeline for clearing the backlog.

Organisations named here

  • Administrative Office of the U.S. Courts
  • BAE Systems
  • Bankruptcy Noticing Center
  • Bankruptcy Rules emergency
  • Judicial Conference