Thomson Reuters Detects Cybersecurity Incident Involving C-Track Platform

•1mo ago

Thomson Reuters Detects Cybersecurity Incident Involving C-Track Platform

Tap title to read story

0:00 / 1:20

Thomson Reuters revealed a cybersecurity incident affecting its C-Track case management platform, exposing court records and personal data across eleven United States states, the U.S. Virgin Islands, and Canada. The breach was detected on June 30, though forensic investigations indicate unauthorized third parties accessed specific platform files between March and June. Affected U.S. jurisdictions include Alabama, Pennsylvania, Kentucky, Montana, Nevada, North Dakota, South Carolina, Tennessee, Ohio, New Hampshire, and Wyoming. Judicial authorities confirmed that compromised files contain names, birth dates, driver license numbers, and other sensitive identifying details from court proceedings. Thomson Reuters stated that it immediately contained the activity, engaged external cybersecurity specialists, notified law enforcement, and secured its cloud infrastructure. Company representatives emphasized that operational functions for C-Track remain fully active without disruption. Affected individuals are being offered twelve months of free credit monitoring services while nationwide legal administrators review potential exposure risks moving forward.

Published 2026-09-03 06:47:09 UTC · Published by JQJO

Prepared by Yusra M. · AI assisted

More context

Timeline

On March 1, 2026, unauthorized parties accessed C-Track platform backups.
On June 29, 2026, unauthorized data access period finally concluded.
On June 30, 2026, Thomson Reuters detected platform cybersecurity incident.
On July 23, 2026, Montana officials received official breach notification.
On July 24, 2026, Ohio Supreme Court learned about incident.
On July 28, 2026, Ohio courts notified relevant appellate judges.
On August 31, 2026, investigators confirmed production platform data access.
On September 2, 2026, public press releases disclosed multi-state breach.
On September 3, 2026, international media reported extensive platform compromise.
On September 4, 2026, dedicated customer call centers commenced operations.

Why it matters

Immediate US impact: Courts across eleven states face urgent data security review demands. Possible long-term US impact: Stricter cybersecurity vendor accountability standards will reshape judicial IT contracts. Most affected groups: Court litigants, state judicial systems, and legal administrative staff members. Reader priority: Monitor official court notifications regarding personal credit monitoring protection services.

Coverage notes

Left: Emphasizes corporate negligence and systemic risks in private technology vendors. Center: Focuses strictly on reported facts, affected regions, and official notifications. Right: Highlights government contractor vulnerabilities and potential threats to legal security.