BAE incident halts U.S. bankruptcy notices nationwide

A BAE Systems incident has stopped federal bankruptcy notices nationwide since around October 9, with cause and data impact unconfirmed.

The Administrative Office of the U.S. Courts said on October 15, 2026, that a cybersecurity incident at contractor BAE Systems took down systems supporting the Bankruptcy Noticing Center, which BAE operates for the federal judiciary. Notice production and distribution, including electronic and paper notices, has stopped for every federal bankruptcy court, and sites including bnc.uscourts.gov, bankruptcynotices.uscourts.gov, notices.uscourts.gov, and the National Creditor Registration Service are unavailable; SecurityWeek also says creditor lists are offline. BAE says the incident is isolated to the BNC and that it is investigating and working with the courts to restore service, but officials have not confirmed an actor, malware, a CVE, ransomware, data access, or a restoration date. Sources disagree on framing and timing: The Record and BleepingComputer call it a cyberattack, while Infosecurity Magazine, GBHackers, SecurityWeek, and CyberScoop describe an unspecified cybersecurity or security incident, and The Register uses both phrasings; SecurityWeek says the outage followed BAE’s notice late on October 9 and that notices have been halted for about a week, The Register says disruptions began around October 9, 2026, and CyberScoop says notices stopped on October 9, whereas earlier reports said the start date was not confirmed. Courts still accept filings, though notice service may be delayed, some registered creditor addresses may be missing from local records, a Texas court extended certain stay deadlines by 30 days, and GBHackers advises users to check dockets and treat unsolicited “restored notice” emails as suspicious. The Record calls this the third major recent U.S. government-related incident after attacks on Arizona’s court system affecting 1.3 million people, the DoD, and the FBI, while BleepingComputer instead notes earlier work to harden CM/ECF and PACER.

• The Administrative Office of the U.S. Courts said on October 15, 2026, that a cybersecurity incident at contractor BAE Systems took down Bankruptcy Noticing Center systems.
• BAE operates the BNC for every U.S. federal bankruptcy court; electronic and paper notice production and distribution have stopped.
• Unavailable sites include bnc.uscourts.gov, bankruptcynotices.uscourts.gov, notices.uscourts.gov, and the National Creditor Registration Service; SecurityWeek also says creditor lists are offline.
• BAE says the incident is isolated to the BNC and is investigating with the courts; no actor, malware, CVE, ransomware, data access, or restoration date has been confirmed.
• Timing differs by source: SecurityWeek says BAE notified courts late on October 9 and notices have been halted about a week; The Register says disruptions began around October 9, 2026; CyberScoop says notices stopped on October 9; earlier…
• The Record and BleepingComputer call it a cyberattack; Infosecurity Magazine, GBHackers, SecurityWeek, and CyberScoop describe an unspecified incident; The Register uses both terms.
• Courts still accept filings; a Texas court extended certain stay deadlines by 30 days; CyberScoop says some registered creditor addresses may be missing from local records; GBHackers advises checking dockets and treating unsolicited…
• The Record links this to recent attacks on Arizona’s courts affecting 1.3 million people, the DoD, and the FBI; BleepingComputer instead notes prior work to harden CM/ECF and PACER.