Late on Friday, October 9, a British defense contractor told the Administrative Office of the U.S. Courts that its systems had gone down. Six days later, the judiciary has confirmed that the cause was a cybersecurity incident, and the system that produces and sends notices for every federal bankruptcy court is still offline. The contractor is BAE Systems, the system is the Bankruptcy Noticing Center (BNC), and neither the courts nor the company has said whether any data was stolen.

The label arrived six days after the outage

The first warning came from the courts themselves, not from the government's central cyber agency. A Texas bankruptcy court notice dated October 13 says BAE reported a service disruption late on October 9 affecting the systems that process notices, plus the BNC and National Creditor Registration Service websites. That notice does not use the word cyber. The Administrative Office of the U.S. Courts did so for the first time in a statement on Thursday, October 15, according to The Record from Recorded Future News.

Count the days and the gap is plain: six days from the first disruption to a public admission of a security incident. That is a long time for creditors, trustees and lawyers to guess whether an email had gone missing because of a glitch or an attack.

What stopped and what kept working

The BNC turns court orders into notices and sends them, by email and paper, to creditors and other parties across the country. The outage has halted that production entirely, per the judiciary's statement. The affected sites include bnc.uscourts.gov, bankruptcynotices.uscourts.gov and notices.uscourts.gov.

Some of the system still works. A Georgia bankruptcy court notice says the court's own filing system continues to send its electronic filing notices by email, so lawyers should keep receiving those. A Georgia Southern District notice dated October 15 says the court will keep accepting filings and opening cases. What it cannot do is generate the notices that tell creditors about meetings and deadlines, and it warns that access to the mailing matrix, the address list used to serve those notices, is affected as well. Cases can still be opened, but the notices that tell creditors about them cannot go out.

One contractor, one chokepoint

The BNC is not run by the courts. BAE operates its systems and websites for the federal judiciary, the Administrative Office says. That arrangement makes the outage national at once: one vendor, one platform, all federal bankruptcy courts.

A BAE spokesperson told The Record the incident was "isolated to the BNC system" and that the company had taken immediate steps to address it. That is a narrow claim and an important one, because BAE also provides aerospace, weapons and information security services to several federal departments, according to The Record. Isolation is the statement a customer needs to hear, but it is also the one an outsider can least verify.

The design lesson is blunt. A shared notice service saves every court from building its own, and it also means a single intrusion can stop all of them at once. Nobody has said how the attackers got in, so the lesson about design is separate from the question of blame.

A bad month for federal systems

This is one of several recent incidents involving government systems. The Record notes that the Department of Transportation confirmed on Wednesday, October 14, that a safety agency contact center was temporarily taken offline after a contractor was hit by a cyberattack. It lists recent incidents involving the Defense Department and the FBI. Weeks earlier, Arizona's state court system said hackers took information on more than 1.3 million people.

At least two of these, the courts and the transportation contact center, involved contractors. The courts' own history adds context. The Record reports that federal court officials said last year they were tightening digital security for sensitive documents after a major breach of the courts' case filing system, which officials feared exposed confidential informants in criminal cases. My read is that the judiciary has focused on hardening its own core systems, and a contractor-run service like the BNC is the kind of dependency that effort can miss. No source has said that directly.

What nobody has said yet

Quite a lot is still unknown. The Administrative Office did not answer The Record's questions about the nature of the incident or whether data was stolen. The Cybersecurity and Infrastructure Security Agency, which usually handles federal agency attacks, referred reporters to the courts, and the FBI did not respond. No restoration date has been given, and the Texas notice, which expires on October 16, shows how provisional the courts' own guidance is.

The most useful next fact would be whether this was an attack that locked systems or one that took data, because the two lead to very different obligations to the people on those mailing lists. The BNC handles creditor addresses, so any theft would matter well beyond the courts. Until the judiciary or BAE says more, a missing notice is more likely a system failure than a sign that nothing has happened in a case.