Federal Bankruptcy Courts’ Notice Platform Hit by Cyber Intrusion, No Data Stolen
What Happened — On October 22, the Administrative Office of the U.S. Courts disclosed that the Bankruptcy Noticing Center (BNC)—the system that creates and distributes bankruptcy notices for all federal bankruptcy courts—was taken offline after a cyber intrusion. The platform, operated by BAE Systems, experienced a service‑wide outage that halted notice production and forced courts to issue an emergency declaration allowing deadline extensions. By mid‑November the contractor restored the BNC and began processing a backlog of filings. BAE Systems confirmed that no other systems were affected, no personally identifiable information (PII) was extracted, and no data breach was identified. The attackers have not claimed responsibility.
Why It Matters for Trust & Control Assurance — The incident tests an organization’s incident‑response and business‑continuity controls; evidence of how quickly services are restored and how emergency procedures are invoked is a key trust signal.
Who Is Affected
- Federal judiciary (U.S. bankruptcy courts)
- Legal practitioners and parties relying on timely bankruptcy notices
Recommended Actions
- Review and exercise your incident‑response and continuity‑of‑operations plans against this scenario.
- Map the “detect, contain, recover, and communicate” steps to your audit‑readiness evidence repository.
- Validate that emergency‑procedure triggers (e.g., regulatory extensions) are documented and can be demonstrated to auditors.
Technical Notes
- Attack vector: not publicly disclosed (unknown).
- No CVEs or specific vulnerabilities were reported.
- Impact limited to service disruption; no data exfiltration confirmed.