#outage

The Administrative Office of the U.S. Courts said on October 15 that a cybersecurity incident hit BAE Systems IT and the websites that support the Bankruptcy Noticing Center, which produces and sends bankruptcy notices for all federal bankruptcy courts. BAE operates those systems for the judiciary.

The courts said all access to the center's systems was unavailable, including bnc.uscourts.gov, bankruptcynotices.uscourts.gov, notices.uscourts.gov and the National Creditor Registration Service, and that production and distribution of bankruptcy notices had stopped. A BAE Systems spokesperson told Reuters the company is aware of "a security incident that is isolated to the BNC system" and is coordinating with the courts.

Neither the courts nor BAE has said what caused the incident or whether data was taken.

GMO Internet's Onamae.com Desktop Cloud, a Japanese virtual private server service marketed for running automated FX trading software, says a third party gained unauthorized access and installed malicious programs in some customers' server environments. Its notice lists 26,739 servers as possibly affected.

To prevent further damage, the company began shutting down customer servers from 04:00 local time on October 21, affecting all Desktop Cloud plans, with no restart date given. BleepingComputer reports the company says data stored on the servers may have been exposed but it has not confirmed misuse, and that payment details are kept on separate infrastructure.

Customers who stored passwords or other secrets on their servers are advised to change them, and the company warns of phishing that may exploit the incident, saying it will never ask for passwords or card numbers by email or phone.