C-Track Platform Breach Affects Court Records in 11 U.S. States and Canada

Thomson Reuters has revealed that its judicial platform, C-Track, was subjected to a significant cybersecurity incident, resulting in unauthorized access to files containing court records, names, and personal data. This incident affected judicial entities in 11 U.S. states, the U.S. Virgin Islands, and Canada.

Details of the Breach

According to an official notice from the company and a statement from the heads of three courts in Ontario, the attack was discovered on June 30. A subsequent investigation revealed that unauthorized access to some of the platform’s files occurred in March.

Ontario courts use the C-Track platform to manage their records digitally, prompting judicial authorities there to coordinate with the Ministry of Justice to contain the unauthorized activity.

Affected States

According to West Publishing, a subsidiary of Thomson Reuters, the breach affected court systems in: Alabama, Pennsylvania, Kentucky, Montana, Nevada, North Dakota, South Carolina, Tennessee, Ohio, New Hampshire, Wyoming, and the U.S. Virgin Islands.

Company Measures

Thomson Reuters confirmed that it has:

• Contained the unauthorized activity
• Engaged external cybersecurity experts
• Notified law enforcement authorities
• Enhanced the security of the C-Track environment
• Informed affected clients

A company spokesperson stated that the incident did not cause any operational disruption to the platform, and services are fully operational and secure.

Nature of the Compromised Data

The extent of the compromised information remains unclear, but the judicial statement indicates the potential leakage of personal data of individuals involved in legal proceedings or mentioned in official documents.

Next Steps

Thomson Reuters Canada announced it will establish a communications center to respond to inquiries starting September 4, while the company continues to address inquiries in the United States and Canada.