Thomson Reuters Data Breach Exposes Court Records in US and Canada

Technadu

Thomson Reuters Data Breach Exposes Court Records in US and Canada

First seen 3 Sep 2026, 01:13 UTC • •62.3

Article Content

1 / 18

Browse articles

ThreatCluster •September 4, 2026 at 00:59 UTC

•Thomson Reuters' C-Track platform breach affects courts in 11 US states and Canada.
•Sensitive personal information, including Social Security numbers, may have been exposed.
•Thomson Reuters is providing credit monitoring services to affected individuals.

Thomson Reuters reported a data breach affecting its C-Track case management platform, impacting court systems in 11 US states, the US Virgin Islands, and Canada. The unauthorized access occurred between March and June 2026, with the breach detected on June 30. The compromised data includes sensitive personal information such as names, Social Security numbers, driver's license numbers, and potentially confidential court records. Thomson Reuters has engaged cybersecurity experts and law enforcement to investigate the incident, which was not caused by the affected courts' systems. The company is offering 12 months of free credit monitoring for those affected. Notifications have been sent to impacted users, and a dedicated call center will be established for inquiries. The investigation is ongoing to assess the full scope of the breach and the number of individuals affected.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 45d ago How this analysis works

Timeline

2026-03-01

Unauthorized access begins

An unauthorized party began accessing C-Track files, leading to a data breach.

Therecord.Media

2026-06-30

Breach detected

Thomson Reuters detected unauthorized activity in its C-Track platform, prompting an investigation.

Infosecurity-Magazine

2026-07-23

Notification to courts

Thomson Reuters informed the Montana Office of Court Administrator about the breach affecting multiple states.

2026-09-02

Public disclosure

Thomson Reuters publicly disclosed the breach and its impact on court records in a statement.

Infosecurity-Magazine

2026-09-03

Credit monitoring offered

Thomson Reuters announced it will provide 12 months of free credit monitoring to affected individuals.

More articles in this cluster (17)

Threat Graph

5 entities, 4 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (2)

Data Breach
T1041 - Exfiltration Over C2 Channel

Organization (1)

Thomson Reuters

Weakness (1)

CWE-200 - Exposure of Sensitive Information

Affected Platform (1)

C-Track

Relationships

Data Breach targets C-Track
T1041 - Exfiltration Over C2 Channel targets C-Track
Data Breach related to Thomson Reuters
Data Breach related to CWE-200 - Exposure of Sensitive Information

Following this threat?

Track Thomson Reuters in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…

Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…