A cybersecurity incident has disrupted the U.S. Bankruptcy Noticing Center (BNC), halting automated administrative functions within the federal bankruptcy court system. The disruption, which began on October 9, 2026, centers on the BNC, a centralized hub responsible for producing and transmitting notices for all federal bankruptcy courts nationwide.
While the Administrative Office of the U.S. Courts initially monitored the outage as a technical failure, it officially confirmed the event as a cybersecurity incident on October 15. The outage has disabled several critical portals, including bnc.uscourts.gov, bankruptcynotices.uscourts.gov, and the National Creditor Registration Service, effectively severing the primary communication link between the courts and creditors nationwide.
The disruption has created a specific technical divide in court operations. The Case Management/Electronic Case Files (CM/ECF) system remains functional, meaning attorneys and debtors can still file motions and petitions with the court. However, the BNC—which normally takes those filings and automatically generates the mandatory “notices” sent to creditors, banks, and other parties—is offline. This means that while documents are being filed, the legal requirement to serve notice to affected parties is not being fulfilled through the usual automated channels.
For legal professionals and debtors, the impact is immediately felt in the form of missed deadlines and stalled proceedings. Because bankruptcy law often relies on strict noticing timelines to trigger stays or objections, individual courts have begun issuing emergency orders to mitigate the fallout. The U.S. Bankruptcy Court for the Eastern District of Texas has already issued a 30-day extension for active motions to stay, providing a buffer for cases where the BNC outage prevented timely notification of creditors.
The breakdown of the National Creditor Registration Service adds another layer of complexity for private law firms. This service is typically used to generate mandatory mailing lists for serving documents; without it, firms must manually compile creditor data, a labor-intensive process that increases the risk of procedural errors.
There has been no official confirmation regarding the specific nature of the attack, such as whether it involves ransomware, or if sensitive debtor and creditor data has been exfiltrated. Court administrators continue to investigate the scope of the incident. In the interim, legal practitioners are being advised to monitor individual district court websites for standing orders regarding manual service requirements and deadline extensions.
