Drooid Logo
Back to story perspectives

Full Breakdown

Nationwide Cyber Incident Halts Federal Bankruptcy Court Notices

By Drooid · · How we work

Incident Overview

A cybersecurity incident affecting the Bankruptcy Noticing Center (BNC)—the system that generates and distributes notices for all U.S. federal bankruptcy courts—went offline on October 9, 2026. The BNC is operated by defense contractor BAE Systems on behalf of the federal judiciary. The outage disabled access to the BNC’s websites (bnc.uscourts.gov, bankruptcynotices.uscourts.gov, notices.uscourts.gov) and the National Creditor Registration Service, halting the production and delivery of both electronic and paper notices to creditors, debtors, trustees, and attorneys.

Timeline of Disclosure

  • October 9, 2026 – BAE Systems notified the Administrative Office of the U.S. Courts (AOUSC) of a service disruption affecting the BNC.
  • October 13, 2026 – Individual courts posted public notices describing a service interruption, without yet labeling it a cybersecurity event.
  • October 15, 2026 – The AOUSC issued a formal notice confirming that the BNC’s IT systems and supporting websites had been impacted by a cybersecurity incident.
  • October 17, 2026 – Media reports detailed the incident, noting that the problem had persisted for about a week.

Operational Impact

With the BNC offline, courts cannot generate creditor mailing lists or send deadline notifications, delaying communications essential to bankruptcy proceedings. The Eastern District of New York reported that its separate electronic filing notification emails continued normally, but the Northern District of Texas warned that parties must request deadline extensions or hearing postponements in writing or at scheduled hearings. Attorneys relying on the electronic case filing system lack a complete address matrix, potentially leaving debtors and trustees unnotified.

Official Responses

BAE Systems confirmed ongoing investigation and restoration efforts but did not disclose technical details, the identity of any attacker, or whether data was exfiltrated. Courts emphasized that new filings and electronic notifications to registered attorneys remain operational, while the notice-generation pipeline stays down.

Broader Implications

The incident underscores the vulnerability of critical judicial functions that rely on third-party contractors. Prolonged disruption of the nationwide notice system can delay creditor participation, extend case timelines, and increase the administrative burden on courts and litigants. The six-day gap between the contractor’s initial alert and the public acknowledgment of a cybersecurity incident highlights challenges in timely communication during federal IT emergencies.