Asl matn EN tilida, manba saytidan olindi. Manba ↗

Incident Response

BAE Says No Data Extracted in Incident Hitting Bankruptcy Courts

BAE Systems says no data was extracted and no PII was breached in the incident that disrupted US bankruptcy court notices for weeks.

By

Eduard Kovacs

| October 29, 2026 (9:26 AM ET)

*

  • Flipboard
  • Reddit
  • Whatsapp
  • Whatsapp
  • Email

BAE Systems has restored the federal judiciary’s Bankruptcy Noticing Center (BNC) and says no data was taken in the cybersecurity incident that knocked it offline for more than two weeks.

“BAE Systems, Inc., working closely with the Administrative Office of the U.S. Courts (AOUSC), has resumed operations of the Bankruptcy Noticing Center (BNC) system. No other systems were affected. No data was extracted. There was no breach of any PII,” a BAE Systems, Inc. spokesperson told SecurityWeek.

The BNC, which BAE operates under contract with the judiciary, is the channel through which all federal bankruptcy courts in the US send their notices. Notices stopped flowing through the center around October 9.

When the incident first came to light, neither BAE nor the judiciary addressed whether any data had been compromised. BAE’s new statement still leaves out what caused the incident and whether it was a cyberattack.

On October 27, the Administrative Office of the US Courts confirmed that, according to BAE, the problems had been fixed and the BNC was available again.

Bankruptcy court notices show the center came back on October 26 and began clearing the delayed notices, oldest first.

Advertisement. Scroll to continue reading.

In response to the outage, the Judicial Conference declared a “Bankruptcy Rules emergency” on October 22. The declaration lets bankruptcy judges push back deadlines, pause time periods and issue related orders to deal with the fallout.

No ransomware or other cybercrime group appears to have publicly claimed responsibility for the incident.

Related: Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net

Related: HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million

Related: Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk

Written ByEduard Kovacs

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Business Email*

emailsignupsource

Read our Privacy Policy for more information.

More from Eduard Kovacs

  • TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices
  • Long-Hidden Flaws Patched in EPICS Research Facility Control Software
  • CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts
  • Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws
  • iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18
  • Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems
  • Industrial Vendors Check Products for PHP2Shell Vulnerabilities
  • PHP2Shell Exploitation Moves From Probes to Working Shells

Latest News

  • Over 41,000 DHS Employee Records Leaked Online
  • Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net
  • Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network
  • Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August
  • HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million
  • Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day
  • Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison
  • Upwind Security Raises$400 Million at$3.8 Billion Valuation

Trending

Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

China-Linked Hackers Exploit PHP2Shell to Root Firewalls

CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts

Chrome and Firefox Updates Patch Over 200 Vulnerabilities

iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18

HPE Patches Dozens of Critical Flaws in Networking Products

Hackers Start Probing Fresh Oracle EBS Vulnerability

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Business Email*

emailsignupsource

Read our Privacy Policy for more information.

Webinar: Agentic Pentesting for a Stronger CTEM Program

November 4, 2026

Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.

Register

Virtual Event: CISO Forum 2026 Summit

November 10 & 11, 2026

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Register

People on the Move

Quantum eMotion has named Wayne Teeple as CTO.

Guy Ellis has been appointed CEO of NCC Group.

Noma Security has named Bobby Shoker as CFO and Alberto Rodrigues as CCO.

More People On The Move

Expert Insights

*

  • Flipboard
  • Reddit
  • Whatsapp
  • Whatsapp
  • Email

Nobody Trusts the Security Questionnaire. We Rely on It Anyway.

The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.(Sravish Sridhar)

This is Fine: What NetScaler Zero-Days Tell Us About the New Normal

Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.(Tod Beardsley)

The Key to AI Software Security Isn’t Speed, It’s Maturity

Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)

Context Is King in the Fight Against Modern Cyberattacks

Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.(Etay Maor)

AI Has Changed Attack Speed, Not Security Fundamentals

As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.(Joshua Goldfarb)