Attack on BAE-managed system disrupts US bankruptcy courts

Access to official bankruptcy notices is now delayed, potentially impacting legal deadlines and case progression for individuals and businesses involved in bankruptcy proceedings.

The United States bankruptcy courts are experiencing significant disruptions due to a cybersecurity incident affecting the Bankruptcy Noticing Center (BNC). BAE Systems, the UK-based vendor managing the BNC's systems and websites on behalf of the Federal Judiciary, has taken the affected systems offline. This outage has halted the production and distribution of bankruptcy notices, impacting federal bankruptcy courts nationwide. The issue, which began around October 9th, has led to delays in legal proceedings, with some courts extending deadlines by an additional 30 days for specific case filings. The Administrative Office of the U.S. Courts confirmed the incident, stating that BAE Systems is working to restore operations. This attack follows a series of cyber incidents targeting U.S. public sector entities.

This attack on a critical government system managed by a major defense contractor highlights the persistent and evolving threat landscape facing public sector IT infrastructure. The reliance on third-party vendors like BAE Systems for managing essential services underscores the complex interdependencies in government cybersecurity, where a single point of failure can have widespread consequences. The extended delays in notice distribution suggest a potentially sophisticated attack that has compromised core operational capabilities, raising questions about the resilience of systems handling sensitive legal and personal data.

The incident signals a concerning trend of cyberattacks targeting the justice system, following previous breaches in other judicial branches. It puts pressure on the government and its contractors to accelerate the implementation of more robust cybersecurity measures and incident response protocols. The disruption to the Bankruptcy Noticing Center may prompt a re-evaluation of outsourcing strategies for sensitive IT functions and could lead to increased scrutiny of vendor security practices and contractual obligations within federal agencies.