The cyberattack on BAE Systems has halted federal bankruptcy court notices across the U.S. court system, with the outage stemming from the contractor’s central role in the Judiciary’s noticing infrastructure. The Administrative Office of the US Courts confirmed Thursday that the systems used to produce and distribute bankruptcy notices are now unavailable, disrupting a critical administrative pipeline that creditors, trustees, and judges depend on for the legal notifications that drive cases forward.
The incident is striking not only because of its immediate practical impact, but because of who sits behind it. BAE Systems is Europe’s largest defense contractor, a company more commonly associated with fighter jets, naval combat systems, and intelligence platforms than with bankruptcy paperwork. Yet its government technology arm also operates the federal Judiciary’s centralized bankruptcy noticing systems—an arrangement that illustrates how deeply private contractors are embedded in the public administration of justice. When that contractor is hit by a cyberattack, the court system’s routine operations stop.
When that contractor is hit by a cyberattack, the court system's routine operations stop.
According to the Administrative Office, BAE Systems is actively investigating the incident and working to restore operations. The judicial branch has also been in direct contact with the courts affected by the outage, but it has not said when the targeted services might return or whether any data was compromised. The absence of that detail leaves an uncomfortable question hanging over the disruption: what began this attack, and how far has it reached?
Why the Cyberattack on BAE Systems Halts Federal Bankruptcy Court Notices
Bankruptcy proceedings are, at their core, a system of structured notice. Creditors must be told about filings, debtors must be informed of hearings, trustees must receive claims deadlines, and courts must certify that parties have had a chance to respond. Much of that notice infrastructure is centralized: rather than each bankruptcy court maintaining its own mailing and notification operation, the federal Judiciary contracts with BAE Systems to operate what is known as the Bankruptcy Noticing Center, or BNC. It is that central operation that has been knocked offline.
The Administrative Office described the problem in unusually direct terms. As a result of the incident, it said, “all access to the BNC systems and websites that BAE operates on behalf of the Judiciary and the related bankruptcy noticing process are unavailable at this time.” The statement listed the specific web properties and services that had gone dark, giving courts, creditors, and the public a clear picture of what could no longer be reached:
| Affected service | URL or system |
|---|---|
| Bankruptcy Noticing Center portal | bnc.uscourts.gov |
| Bankruptcy notice distribution site | bankruptcynotices.uscourts.gov |
| Federal court notices site | notices.uscourts.gov |
| National Creditor Registration Service | System unavailable |
Each of these services plays a distinct role in the noticing ecosystem. The main BNC portal is where court staff and creditors interact with the noticing system. The bankruptcynotices domain has historically been used for electronic bankruptcy notice distribution. The notices domain functions as a broader access point for official court notices. And the National Creditor Registration Service is the tool creditors use to maintain the information required to receive notices in multiple cases. With all of them offline, the normal workflow of bankruptcy administration has effectively been frozen at the notice stage.
BAE Systems: A Defense Giant With a Government IT Role
For readers who know BAE Systems primarily as a defense contractor, its involvement in bankruptcy court notices may seem strange. But the company’s portfolio has expanded far beyond weapons platforms. BAE Systems designs and manufactures military technology for the UK and US defense departments, and it is also a major provider of enterprise IT, cloud infrastructure, and cybersecurity services to military, intelligence, and civilian government agencies worldwide. That dual identity makes it a particularly significant figure in this incident: a company that protects sensitive national security systems is also responsible for systems that keep ordinary bankruptcy cases moving.
The arrangement is not unique to BAE. The federal court system has long relied on private technology contractors for core operational functions, including case management, electronic filing, and public access. The consequence, as this incident demonstrates, is that the resilience of a constitutionally independent branch of government can hinge on the cybersecurity of a third-party vendor. When that vendor becomes the target of an attack, the courts are not merely a spectator; they are a collateral victim of the intrusion.
The Administrative Office of the US Courts did not disclose the nature of the cyberattack, the entry point, or the scope of the damage. BAE Systems also had not provided public details by the time of the announcement. That lack of transparency is common in the early hours of a cyber incident, but it does not diminish the concern. The same infrastructure that produces routine bankruptcy notices may connect to other Judiciary systems, and the longer the outage lasts, the more pressure there will be on both BAE and the courts to explain exactly what happened.
The Judiciary Was Already Rebuilding After a Court Records Breach
The latest disruption follows another uncomfortable chapter in the Judiciary’s cybersecurity history. In 2025, the federal Judiciary acknowledged it was strengthening cybersecurity defenses after a cyberattack affected its electronic case management systems. News reports at the time described a deeper and more serious problem: attackers had breached CM/ECF, the Case Management/Electronic Case Files system, and PACER, the Public Access to Court Electronic Records platform. The intrusion allegedly gave attackers access to sensitive materials, including the identities of confidential informants.
The Judiciary did not confirm a breach of confidential documents in those reports, but it did not deny the core danger either. Instead, it said it was taking additional steps to protect sensitive case documents in response to what it described as “recent escalated cyberattacks of a sophisticated and persistent nature on its case management system.” Most documents in the court system are public, the Judiciary noted, but certain sealed filings containing sensitive information would now be protected by stricter access controls designed to block attackers.
That background matters here for at least two reasons. First, it shows that the federal Judiciary is not unaccustomed to being targeted. Courts hold an extraordinary concentration of sensitive personal, financial, and sometimes national-security information. Second, it shows that the Judiciary’s current strategy for tackling cyber incidents explicitly recognizes the sophistication of the threat. The BAE outage, however, is a reminder that even the best internal court security can be undermined by a breach elsewhere in the supply chain.
What Does This Mean for Bankruptcy Cases and Creditors?
The most immediate consequence of the outage is practical. Bankruptcy notices are not optional court mailers; they are legally significant documents that inform parties about hearings, claim deadlines, confirmation proceedings, and other events that can determine whether a creditor gets paid or whether a debtor receives a discharge. When the production and distribution of those notices stops, the risk of missed deadlines and procedural confusion rises.
The Administrative Office said it has been in communication with the impacted courts, suggesting that individual bankruptcy courts may issue orders to address the disruption. But no nationwide contingency plan has been announced so far. Creditors who rely on the National Creditor Registration Service to keep their contact details current will need to wait for the system to return. Debtors and attorneys who ordinarily use the BNC portal to confirm that a notice was issued will have to rely on direct contact with the court or on whatever interim methods the court establishes.
One open question is whether the outage will affect statutory or court-ordered deadlines. In some cases, a notice triggers a deadline that is defined by the date of service. If notices are not produced or distributed, the calculation of those deadlines becomes far more complicated. Federal courts have authority to adjust certain deadlines in the interests of justice, but such decisions must be made openly and case by case. Until the noticing systems are restored, that kind of relief may be hard to request through the very systems that are unavailable.
What Systems Are Offline Because of the Cyberattack on BAE Systems?
All of the U.S. Judiciary’s Bankruptcy Noticing Center systems operated by BAE Systems are offline, including bnc.uscourts.gov, bankruptcynotices.uscourts.gov, notices.uscourts.gov, and the National Creditor Registration Service. The outage also halts the production and distribution of bankruptcy notices.
The inclusion of the National Creditor Registration Service is particularly significant for creditors, because that system is designed to allow a single registration to apply across multiple bankruptcy cases. Without it, creditors who are not already registered may have difficulty initiating a notice relationship with courts when service resumes. For routine users, the main question is simpler: when will the screens come back, and will any sent notices be lost?
What Is the Bankruptcy Noticing Center?
The Bankruptcy Noticing Center is the centralized facility that prepares, serves, and manages bankruptcy notices on behalf of the federal Judiciary. Instead of each bankruptcy court issuing its own paper and electronic notices, the BNC aggregates noticing operations into a shared service operated by a contractor. In this case, that contractor is BAE Systems. The center handles the production and distribution of notices that bankruptcy courts direct to creditors, trustees, and parties in interest.
The fact that such a concentrated system exists makes it highly efficient—and highly vulnerable. A failure at one center can disrupt cases across the country rather than in a single courthouse. That centralization is also what transforms a contractor cyberattack into a national court-system emergency.
What Should You Do If You Need a Bankruptcy Notice Right Now?
If you are waiting for a notice from a federal bankruptcy court, the safest step is to contact the court directly through official channels. Bankruptcy court websites are operated separately from the BNC and remain available in most cases. Court clerks can often confirm whether a hearing is scheduled, whether a document has been filed, and whether a notice was ultimately generated before the outage began. For creditors, it is also worth monitoring the Judiciary’s announcements for information about whether deadline extensions will be issued.
That said, the absence of a clear public contingency plan makes this a stressful time for people who need certainty. Anyone with an urgent filing deadline should consider submitting a filing through CM/ECF, which remains separate from the noticing infrastructure and may still be operational. But if the filing itself depends on information contained in a notice that has not yet been produced, the guidance of a local bankruptcy attorney is advisable.
The Broader Problem of Vendor-Dependent Court Infrastructure
This incident is not just about BAE Systems, and it is not just about bankruptcy notices. It is about the quiet dependence of the entire American judicial system on a small number of technology vendors. Defense contractors, cloud providers, and specialized software firms now sit inside the government’s most sensitive workflows. Some maintain court filing systems. Others operate public access platforms. Still others, like BAE, run the notification apparatus that keeps the legal world turning.
That dependence has grown for understandable reasons. The federal Judiciary never had the in-house capacity to build and maintain every modern software system it uses, so it turned to private vendors with specialized expertise. But with that expertise comes risk. A cyberattack on a vendor can ripple through the court system faster than any internal security team could respond. It also creates a dangerous alignment of incentives: an attacker can potentially compromise dozens of courts at once by targeting one vendor.
The BAE outage should therefore be read as evidence that the Judiciary’s threat model must expand. Securing court systems is no longer just about firewalls and perimeter defenses around courthouse networks. It is about scrutinizing the security posture of every contractor that touches court data, every subcontractor that supports that contractor, and every physical and virtual path that connects them to the courts. It is also about building resilient alternatives, so that a single attack on a single vendor cannot freeze an entire branch of government service.
In the near term, the focus will be on restoring the noticing systems and identifying what, if anything, was stolen. In the longer term, the harder work will be reducing the concentration of risk that made this outage possible. The federal Judiciary has already endured one high-profile breach of its case management systems. Now it is coping with another contractor-related cyberattack, this time on the systems that keep bankruptcy notices moving. Two incidents in this short a window are more than a coincidence; they are a pattern that calls for a structural response.
Until then, the bankruptcy court system remains in a state of suspended operation, the digital equivalent of a locked filing room in a busy courthouse. Creditors cannot check notice histories. Court staff cannot send out official notifications. And attorneys advising clients have no clear answer to the most basic question: when will the system be back? The restoration timeline now depends on BAE Systems’ investigation, the cooperation of the Administrative Office, and the resilience of the forensic process. What remains to be seen is whether the courts also reexamine the architecture that allowed one contractor to have so much control over the machinery of justice in the first place.
- What services were affected by the cyberattack on BAE Systems?The Bankruptcy Noticing Center portal, bankruptcy notice distribution site, federal court notices site, and National Creditor Registration Service were all affected.
- Why does the cyberattack on BAE Systems halt federal bankruptcy court notices?BAE Systems operates the centralized Bankruptcy Noticing Center for the federal Judiciary, and the attack knocked that system offline.
