Thomson Reuters C-Track Breach Hits U.S. and Ontario Courts

Platform affected: A cybersecurity incident hit Thomson Reuters' C-Track case management platform across 11 U.S. states, the U.S. Virgin Islands, and Canada.

Access timeline: An unauthorized party obtained certain C-Track files between March and June, with the incident detected on June 30.

Data exposed: Affected court records included names, personal information, and in some cases dates of birth and driver's license numbers.

Thomson Reuters has disclosed a cybersecurity incident involving its C-Track case management platform, affecting court systems across 11 U.S. states, the U.S. Virgin Islands, and Canada. The company detected the incident on June 30, according to a notice issued Wednesday and a statement from the chief justices of three Ontario courts that rely on the platform.

Unauthorized Access to C-Track Files Traced to March

A subsequent investigation by Thomson Reuters found that an unauthorized party obtained certain C-Track files during a window running from March 1 to June 29, before the intrusion was discovered and contained.

The West Publishing unit of Thomson Reuters said some court records were "affected." While a significant portion of the compromised files consisted of publicly available court docket data, some files contained personally identifiable information (PII), including:

driver's license numbers.

Thomson Reuters said third parties gained unauthorized access to C-Track and E-Filing backup data, which was stored on TR’s servers, indicating the data breach originated on its own storage servers rather than through any vulnerability in state court networks.

The company confirmed it took containment and security steps, engaged external cybersecurity experts, notified law enforcement, and secured the C-Track environment.

U.S. and Ontario Court Systems Impacted

The West Publishing website said the incident hit court systems in Alabama, Pennsylvania, Kentucky, Montana, Nevada, North Dakota, South Carolina, Tennessee, Ohio, New Hampshire, Wyoming, and the U.S. Virgin Islands.

In Canada , the chief justices said Thomson Reuters detected unauthorized activity in one of its cloud environments and worked with Ontario's Ministry of the Attorney General to contain it.

The Ontario courts said the incident may have affected the personal data of individuals involved in court proceedings or mentioned in court documents.

No Operational Disruption and Center Details

" There has been no operational disruption to C-Track as a result of this incident, " a Thomson Reuters spokesperson said , adding that products and services remain fully operational. Thomson Reuters Canada will respond to all inquiries and open a call center on September 4.

In other recent news, FulcrumSec has published allegedly stolen data in the Manchester Airports Group breach , including MAG's future travel plans and marketing platform details.