BAE Systems Cyberattack Halts US Federal Bankruptcy Notices

Critical judiciary systems forced offline

The BAE Systems cyberattack struck directly at an obscure yet vital piece of judicial plumbing. The Bankruptcy Noticing Center (BNC) handles the heavy lifting of producing and mailing official court orders, meeting dates, and discharge notices to creditors and debtors across all federal bankruptcy districts.

According to an advisory posted on the US Federal Courts website, the breach forced administrators to pull multiple public and operational domains offline. Knocked out alongside the primary processing pipeline are bnc.uscourts.gov, bankruptcynotices.uscourts.gov, notices.uscourts.gov, and the National Creditor Registration Service.

With distribution halted, statutory deadlines tied to mailing confirmations risk falling out of sync until service returns.

A defense giant handling court documents

While London-based BAE Systems is best known as a military supplier producing Eurofighter Typhoons and armored combat vehicles, the contractor also secures major government IT outsourcing deals. The company confirmed the intrusion to BleepingComputer, describing it as an isolated incident.

"We are aware of a security incident that is isolated to the BNC system and have taken immediate steps to address it," the company said in a statement, noting that recovery efforts are ongoing alongside the Administrative Office of the US Courts (AOUSC).

Neither BAE Systems nor the federal courts have identified the attackers, nor have they confirmed if any sealed files or creditor payment records were accessed or exfiltrated during the intrusion.

Court infrastructure remains under constant attack

The attack continues an alarming pattern of breaches targeting judicial platforms. In August, court officials acknowledged "escalated cyberattacks of a sophisticated and persistent nature" against federal case-management infrastructure, where adversaries routinely hunt for sealed corporate disputes and unredacted dockets.

Third-party vendors often serve as the weak link. Earlier in 2026, an intrusion at Thomson Reuters affected its C-Track court case-management software, and credential harvesting campaigns like the fake WatchGuard VPN portal demonstrate how aggressively threat actors hunt enterprise administrative credentials.

State courts face identical pressure. A single employee falling for a credential phishing lure at the Arizona Supreme Court recently led to the leak of records belonging to 1.3 million people, underscoring how vulnerable legal recordkeeping remains when third-party custody breaks down.

What it means for court proceedings

For US attorneys, debtors, and creditors, the primary impact is procedural delay. Because formal notices regarding automatic stays, bankruptcy filings, and meeting schedules cannot be mailed or routed digitally through the National Creditor Registration Service, local court clerks may have to issue manual orders or adjust hearing calendars.

Those checking the status of ongoing federal filings will find public BNC web portals unresponsive until AOUSC clears BAE Systems to restore production servers.