BAE Says No Data Extracted as US Bankruptcy Notices Resume
The Bankruptcy Noticing Center (BNC), run by contractor BAE Systems and the channel for notices from all U.S. federal bankruptcy courts, returned on October 26 after more than two weeks offline from a security incident. BAE says its internal investigation concluded no data was extracted and no personal information was breached; the cause has not been disclosed and no group claimed the attack. Notices backlogged since October 7 are still being processed gradually, with deadlines extendable under the emergency declared on October 22.
What happened
A security incident took offline for more than two weeks the service that delivers notices for all U.S. federal bankruptcy courts, run by contractor BAE Systems. Service returned on October 26 and is clearing the backlog gradually. BAE says no data was extracted and no personal information was breached.
Why it matters
Official bankruptcy notices stopped flowing, delaying deadlines for creditors and debtors nationwide; judges needed an emergency declared on October 22 to extend deadlines. Paper notices produced between October 13 and the resumption arrive with a delay warning. The cause has not been disclosed, keeping data-risk uncertainty despite BAE's denial.
What to do
Track backlog processing and press for confirmation of full delivery, not yet announced. Case parties should check new deadlines with the clerk's office listed on the notice received. Demand the incident cause and investigation findings from the contractor.
For the technical team
- Affected
- Bankruptcy Noticing Center, serviço de avisos de falência dos tribunais federais dos EUA operado pela contratada BAE Systems · Bankruptcy Noticing Center (BNC) and BAE-operated judiciary sites: bnc.uscourts.gov, bankruptcynotices.uscourts.gov, notices.uscourts.gov and the National Creditor Registration Service, all offline during the outage.
- Exploitation
- No exploitation details disclosed. No ransomware or other cybercrime group has publicly claimed responsibility, per SecurityWeek and The Record. BAE states no other systems were affected, no data was extracted and no PII was breached.
- Fix
- No software fix applicable. Service restored on October 26 and confirmed available by the AOUSC on October 27; backlog processed from October 7, oldest first.
- Vector
- Central bankruptcy notice service (BNC), operated by BAE Systems under contract with the U.S. federal judiciary. Unspecified failure: BAE has not disclosed the cause or confirmed whether it was an attack. The Record describes the case as a cyber intrusion.
- More details
- Notices stopped flowing around October 9 (SecurityWeek). The 'Bankruptcy Rules emergency' declared on October 22 lasts 90 days, through January 2027 unless ended by court officials. Paper notices created between October 13 and the resumption carry a delayed-mailing warning. DailyDarkWeb notes complete delivery and full restoration have not been confirmed.
Timeline
BAE Systems says its probe concluded that no data was extracted from the bankruptcy noticing systems.
Contractor BAE Systems says no data was extracted and no PII was breached in the incident.
Incident opened.
Sources 3 sources
- @DailyDarkWeb @DailyDarkWeb
- BAE Says No Data Extracted in Incident Hitting Bankruptcy Courts SecurityWeek
- Federal bankruptcy courts contractor says no data stolen during cyber intrusion The Record
