Administrative Office of the United States Courts (AOUSC)

The US federal judiciary's case management system was breached by sophisticated threat actors, exposing sensitive court documents across multiple states. The attack compromised confidential informants' identities in criminal cases and other protected information, such as minors' details. Nation-state actors are suspected. The judiciary is implementing stricter access controls and working to mitigate the impact on affected litigants. This incident follows previous attacks on court systems, highlighting the judiciary as a prime target for espionage, disruption, and extortion.

Source: https://www.infosecurity-magazine.com/news/us-judiciary-security-cyber-attacks/

TPRM report: https://www.rankiteo.com/company/administrative-office-of-the-united-states-courts

"id": "adm413080825",
"linkid": "administrative-office-of-the-united-states-courts",
"type": "Breach",
"date": "8/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'Judicial',
                        'location': 'United States',
                        'name': 'Administrative Office of the United States '
                                'Courts (AOUSC)',
                        'type': 'Government'}],
 'data_breach': {'data_exfiltration': 'Yes',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Confidential court documents, '
                                             'identities of confidential '
                                             'informants'},
 'date_publicly_disclosed': '2024-08-07',
 'description': 'The US federal judiciary announced stronger cybersecurity '
                'protections for sensitive court documents following escalated '
                'cyber-attacks on its case management system. The breach '
                'exposed sensitive court documents in multiple US states, with '
                'nation-state actors suspected of involvement.',
 'impact': {'brand_reputation_impact': 'Potential distrust in the US '
                                       'government',
            'data_compromised': 'Confidential court documents, identities of '
                                'confidential informants',
            'identity_theft_risk': 'High (confidential informants and '
                                   'protected identities)',
            'operational_impact': 'Mitigation efforts to restrict access to '
                                  'sensitive documents',
            'systems_affected': 'Federal core case management system'},
 'initial_access_broker': {'high_value_targets': 'Confidential court '
                                                 'documents'},
 'investigation_status': 'Ongoing',
 'motivation': 'Espionage, disruption, or influence',
 'post_incident_analysis': {'corrective_actions': 'Implementing secure '
                                                  'stand-alone computer '
                                                  'systems for sensitive '
                                                  'documents'},
 'references': [{'date_accessed': '2024-08-06', 'source': 'Politico'}],
 'response': {'containment_measures': 'Restricting access to sensitive '
                                      'documents',
              'incident_response_plan_activated': 'Yes',
              'remediation_measures': 'Implementing more rigorous procedures '
                                      'for document access'},
 'threat_actor': 'Nation-state actors (suspected)',
 'title': 'Cyberattack on US Federal Judiciary Case Management System',
 'type': 'Data Breach'}