Cybersecurity incident at BAE Systems disrupts US bankruptcy court system
Cybersecurity incident at BAE Systems disrupts US bankruptcy court system operations.
Run BAE Systems?
Get an email when a reviewed story names BAE Systems, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
A cybersecurity incident affecting BAE Systems has halted the production and delivery of bankruptcy notices for all U.S. federal courts since October 9th. BAE Systems, a defense contractor operating the Bankruptcy Noticing Center (BNC) for the judiciary, is investigating the incident, which has taken several BNC-related websites offline. The disruption impacts the core administrative function of the judiciary, with no estimated restoration date or cause announced.
The lesson from this incident
Full lessonA cyberattack on BAE Systems, a third-party defense contractor operating the Bankruptcy Noticing Center (BNC), cascaded directly into critical U.S. federal court operations — halting the production and delivery of legally required bankruptcy notices nationwide. This incident exemplifies the systemic risk of outsourcing critical government functions to a single vendor without adequate resilience planning. The lack of an estimated restoration timeline and the absence of disclosed root cause suggest gaps in both incident response preparedness and communication protocols. When a third-party supplier is compromised, the downstream impact can be far broader and harder to control than an internal breach, making supplier risk management a national security concern.
What helps against this
How we list vendors- Security monitoring (SIEM)
Logs from everywhere end up in one place, with alerts that someone actually sees.
- Immutable backup and recovery
Ransomware cannot delete or encrypt your way back.
- Incident response retainer
Experts are on call before the worst day, not searched for during it.