Several things remain unresolved. The Administrative Office has not announced a restoration timeline. Officials have not said what caused the incident, whether bankruptcy records or financial data were accessed, or how many notices were affected. A BAE spokesperson said the company is aware of a security incident isolated to the BNC system and has taken immediate steps to address it. Courts continue to accept filings and open cases, but creditor mailing lists generated through the electronic filing system may be incomplete because they can omit people registered through the BNC's Electronic Bankruptcy Noticing program or the National Creditor Registration Service. The Middle District of Florida and other courts have issued their own orders extending deadlines. The timeline also appears to predate the public announcement: according to the Eastern District of Texas bankruptcy court, BAE first told the Administrative Office of the problem late on October 9. A court website note posted earlier this week described a "nationwide service interruption" with no mention of cyberactivity. The October 15 statement was the first to use the words cybersecurity incident.
For attorneys, the immediate task is verification. Check whether your court has issued an extension order, and do not assume a missing notice means a case is quiet. Confirm creditor addresses directly for any matter where service is pending, especially for creditors registered through the BNC's noticing programs. Watch for a restoration date from the Administrative Office and for any disclosure on data exposure, since either could affect client obligations. The broader issue is dependence on a single contractor for a function that touches every federal bankruptcy case, and the gap between the first disruption and the public acknowledgment will likely draw scrutiny.