Bankruptcy courts across the United States have faced significant delays in sending out notices due to a recent cybersecurity incident involving BAE Systems’ infrastructure. This issue disrupted the operation of the Bankruptcy Noticing Center (BNC), which serves every federal bankruptcy court nationwide.
Impact on Bankruptcy Noticing Center
The BNC, managed by BAE Systems for the federal judiciary, ceased generating and sending notices after the security breach was identified. On Thursday, the Administrative Office of the US Courts reported that the affected systems were currently offline, hindering the usual bankruptcy noticing process.
One major service impacted is the National Creditor Registration Service, which remains inaccessible. Consequently, users of the courts’ electronic filing system cannot produce the necessary creditor mailing lists for document service.
Timeline and Response to the Incident
The issue was first reported to the Administrative Office by BAE on October 9, affecting both the notice-processing systems and the BNC websites. Several courts acknowledged the disruption on October 13, although they did not explicitly mention a cybersecurity event in their announcements.
The Administrative Office is actively engaging with the affected courts and collaborating with BAE Systems, which is investigating the incident and working towards restoring normal operations. A BAE spokesperson confirmed the company’s immediate response and ongoing efforts in coordination with the judiciary.
Ongoing Challenges and Future Outlook
As of now, there has been no disclosure regarding the cause of the incident, whether it was a targeted cyberattack or if any data was compromised. SecurityWeek is awaiting further updates from BAE Systems on these critical points.
Court filings and new case openings continue uninterrupted, despite the suspension of paper and electronic notices from October 9. Notifications are still being sent to registered attorneys, trustees, and the US Trustee electronically. However, there is currently no timeline for when full services will be resumed.
This incident highlights the vulnerabilities in digital infrastructure and underscores the importance of robust cybersecurity measures in safeguarding judicial operations.
