Cyberattack Silences US Bankruptcy Notices — The Court Mailroom Has Misplaced the National Guest List

The US federal bankruptcy court system depends on notices reaching the people whose money, cases and deadlines depend on them. A cybersecurity incident affecting a contractor-run service has interrupted that delivery. The mailroom has not merely misplaced a letter; it has put the national noticing desk behind a velvet rope marked “temporarily unavailable.”

🤚 The Open-Palm Notice

In an official announcement dated October 15, 2026, the Administrative Office of the US Courts said a cybersecurity incident affected the IT systems and websites supporting the Bankruptcy Noticing Center (BNC). The BNC produces and transmits bankruptcy notices for federal bankruptcy courts across the country. BAE Systems operates its systems and websites for the federal judiciary and is investigating and working to restore operations, according to the courts.

The official notice says access to BAE-operated BNC systems and associated websites is unavailable, including the BNC site, bankruptcy notice sites and the National Creditor Registration Service. It also says production and distribution of bankruptcy notices have stopped. That is a service disruption with potentially serious consequences for people waiting for information about court proceedings. It is not a public finding that every bankruptcy court has closed, that every case file was stolen, or that an attacker has been identified.

The Register reported that the Eastern District of Texas bankruptcy court traced the BNC service issue to October 9. That court said it would continue accepting filings, opening cases and processing documents, though notices and orders might be delayed. The federal judiciary’s own announcement concentrates on the interrupted noticing service. The difference between “notices are down” and “the courts are down” is not pedantry when someone is trying to meet a deadline.

👐 The Two-Handed Dependency Audit

Bankruptcy notice is not the glamorous wing of cybersecurity. It has no sleek dashboard of stolen cryptocurrency, no cinematic command center, and almost certainly no executive keynote. It is infrastructure: messages telling creditors, debtors and other parties what the court is doing. When a shared vendor service fails, the operational blast radius can reach across many courts even if the underlying incident is isolated to that vendor’s particular system.

A BAE Systems spokesperson told The Register that the incident was isolated to the BNC system and that the company was coordinating with the Administrative Office. That describes the company’s stated scope at the time, not a final forensic report. Neither the judiciary’s announcement nor the reporting establishes the entry point, the attacker, a ransomware demand or confirmed data exfiltration. A responsible briefing leaves those columns blank instead of filling them with the decorative confidence of a consultant who has never met the logs.

The Eastern District of Texas separately published a service-interruption update and a related order affecting certain cases with active stay motions. Such local measures are important, but they should not be mistaken for a nationwide automatic extension of every bankruptcy deadline. Anyone with an active case should consult the relevant court’s orders and their own counsel rather than outsource legal timing to a headline.

🌿 The Gentle Awakening

The wider lesson is about concentration of operational responsibility. A critical public function can remain legally accountable to government while technologically depending on a third party’s systems. Outsourcing the machinery does not outsource the consequences of silence when the machinery stops. That is why continuity plans, manual alternatives, tested recovery procedures and clear court-by-court communications matter as much as another slide about perimeter resilience.

For people affected, the practical first step is to use official court channels to check case status and local notices. Be wary of unsolicited messages purporting to repair missing notifications or demand payment: a disruption can create an opening for impostors, though there is no claim here that such a campaign is occurring in this incident. The boring security advice remains the expensive advice once nobody follows it.

👑 The Gold-Leaf Reckoning

This case illustrates a distinction executives often discover at unpleasant hours: an incident may be contained to one contractor-operated platform while the service that platform supplies is national. Restoration and investigation are underway, according to the official update; the public still needs timely, specific guidance about notices and any case-level effects. Until the systems return, confidence is not a substitute for delivery.

A court notice is an unromantic piece of democratic plumbing. It should arrive without fanfare. When it cannot, the incident deserves careful attention precisely because the work is ordinary, consequential and invisible until it fails.

“Our premium legal stationery now includes the rare option of actually reaching its destination.” — The Slap of Wisdom Department of Procedural Silverware, reviewing the emergency mail cart