Court ruling, lawsuit, court systems
Federal bankruptcy courts across the US have been unable to send notices through the Bankruptcy Noticing Center (BNC) for a week. The outage followed a cybersecurity incident affecting the BAE Systems infrastructure that runs the center.
The BNC handles notices for every federal bankruptcy court in the country, and BAE runs it as a contractor for the judiciary. On Thursday, the Administrative Office of the US Courts said that, because of the incident, the center is no longer generating or sending notices.
“As a result of the incident, all access to the BNC systems and websites that BAE operates on behalf of the judiciary and the related bankruptcy noticing process are unavailable at this time,” the Administrative Office said.
One of the affected services is the National Creditor Registration Service. While it is offline, users of the courts’ electronic filing system can’t generate the creditor mailing lists they normally use to serve documents.
According to the US Bankruptcy Court for the Eastern District of Texas, BAE first told the Administrative Office about the problem late on October 9. The disruption hit both BAE’s notice-processing systems and the BNC websites.
Several bankruptcy courts posted notices on October 13, calling it a service disruption or interruption. None of them mentioned a cybersecurity incident.
The Administrative Office said it is in contact with the affected courts and coordinating with BAE. The company is investigating the incident and working to restore the systems.
A BAE Systems spokesperson told The Record that the company is “aware of a security incident that is isolated to the BNC system.” The spokesperson said BAE responded right away and is working closely with the Administrative Office.
Neither the judiciary nor BAE has said what caused the incident, whether it was a cyberattack, or whether any data was compromised. SecurityWeek has reached out to BAE with questions on these points and will update this article if the company responds.
Courts have warned that paper and electronic notices issued through the center since October 9 have not been delivered. Electronic filing notifications to registered attorneys, trustees and the US Trustee are still going out. Courts also continue to accept filings and open new cases.
The courts said there is no estimated date yet for when services will be restored.
Related Content
Cybercrime
Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages
Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man.
Cybercrime
Police Shut Down KillSec Ransomware, Identify Alleged Teen Leader
Police took control of KillSec’s leak site and secured at least 110 terabytes of data stolen from victims.
Incident Response
Boston Scientific Still Recovering From Cyberattack
The company has called in CrowdStrike and others to investigate the attack that caused global network disruption.
Nation-State
US Disrupts Chinese Hacking Platform Used in Military and Critical Infrastructure Attacks
The operation focused on a group named QTFY, which offers hacking services to the Chinese government and others.
ICS/OT
Dozens of Minnesota Water Utilities Targeted in Coordinated OT Attacks
State and federal agencies respond after intrusions disrupt automated controls at municipal water and wastewater utilities.
Cybercrime
Cyberattack Disrupts Operations of Japanese Frozen Food Giant Nichirei
The company disconnected its systems on July 13 and is starting to gradually restore operations.
Malware & Threats
Sophisticated Deep#Door Backdoor Enables Espionage, Disruption
The stealthy Python-based backdoor framework deploys a persistent Windows implant likely designed for espionage.
Cyberwarfare
Iran-Linked Hacker Attack on Stryker Disrupted Manufacturing and Shipping
Evidence indicates that the attackers leveraged existing endpoint management software rather than malware to wipe devices.
