BAE Systems Cyberattack Disrupts US Bankruptcy Noticing Center

A notice on the US Federal Courts website said BAE Systems IT and websites that support the operations of the Bankruptcy Noticing Center had been impacted by a cybersecurity incident. The BNC produces and transmits bankruptcy notices for all federal bankruptcy courts around the country, and BAE Systems operates BNC systems and websites on behalf of the Federal Judiciary, according to the notice.

The Administrative Office of the US Courts was coordinating with affected courts and with BAE Systems, which was actively investigating the incident and working to restore operations. The notice said all access to the BNC systems and websites that BAE operates for the judiciary and the related bankruptcy noticing process were unavailable at the time, including bnc.uscourts.gov, bankruptcynotices.uscourts.gov, notices.uscourts.gov and the National Creditor Registration Service. The incident had also halted the BNC's production and distribution of bankruptcy notices for bankruptcy courts.

BAE Systems said in a statement to BleepingComputer that it was aware of a security incident isolated to the BNC system and had taken immediate steps to address it. The company said it was coordinating closely with the Administrative Office of the US Courts on the response. There was no official confirmation or clarification on the company's website at the time, according to TechRadar.

BAE Systems is one of the world's largest defense, aerospace and security companies. Headquartered in London, it works on military equipment, weapons, advanced electronics and cybersecurity systems for governments and the military. Its programs include the Eurofighter Typhoon aircraft, armored combat vehicles, naval ships, radars and sensors, and intelligence analysis and digital security services. The company reported about $40.91 billion in sales for 2025 and employs more than 111,000 people worldwide.

The disruption adds to a run of cybersecurity incidents affecting US court systems. TechRadar reported that the Arizona Supreme Court suffered a cyberattack in which it lost sensitive data on more than a million people. An employee allegedly clicked a malicious link in an email, leading to the compromise of information on 1.3 million people with unpaid court fees, fines and restitution payments for traffic and criminal violations dating back 30 years. The threat actors also stole almost 30,000 active and inactive orders of protection and 150,000 reports dating back to 2010 from a foster care board, according to the report.

In September 2026, Thomson Reuters reported suffering a breach a few months earlier that exposed certain court documents to attackers, TechRadar reported. The company operates a court case-management system called C-Track, which was broken into in March 2026. Earlier, in August 2026, the US Judiciary confirmed what it described as escalated cyberattacks of a sophisticated and persistent nature in which threat actors targeted the case management system. The judiciary said most documents filed with its electronic case management system are not confidential and are available to the public, but some filings contain confidential or proprietary information sealed from public view.