Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Incident Response

BAE Says No Data Extracted in Incident Hitting Bankruptcy Courts

BAE Systems says no data was extracted and no PII was breached in the incident that disrupted US bankruptcy court notices for weeks.

Court ruling, lawsuit, court systems

BAE Systems has restored the federal judiciary’s Bankruptcy Noticing Center (BNC) and says no data was taken in the cybersecurity incident that knocked it offline for more than two weeks.

“BAE Systems, Inc., working closely with the Administrative Office of the U.S. Courts (AOUSC), has resumed operations of the Bankruptcy Noticing Center (BNC) system. No other systems were affected. No data was extracted. There was no breach of any PII,” a BAE Systems, Inc. spokesperson told SecurityWeek.

The BNC, which BAE operates under contract with the judiciary, is the channel through which all federal bankruptcy courts in the US send their notices. Notices stopped flowing through the center around October 9.

When the incident first came to light, neither BAE nor the judiciary addressed whether any data had been compromised. BAE’s new statement still leaves out what caused the incident and whether it was a cyberattack.

On October 27, the Administrative Office of the US Courts confirmed that, according to BAE, the problems had been fixed and the BNC was available again.

Bankruptcy court notices show the center came back on October 26 and began clearing the delayed notices, oldest first. 

Advertisement. Scroll to continue reading.

In response to the outage, the Judicial Conference declared a “Bankruptcy Rules emergency” on October 22. The declaration lets bankruptcy judges push back deadlines, pause time periods and issue related orders to deal with the fallout.

No ransomware or other cybercrime group appears to have publicly claimed responsibility for the incident.

Related: Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net

Related: HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million

Related: Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk

Written By

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.

Register

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Register

People on the Move

Quantum eMotion has named Wayne Teeple as CTO.

Guy Ellis has been appointed CEO of NCC Group.

Noma Security has named Bobby Shoker as CFO and Alberto Rodrigues as CCO.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.