Thomson Reuters Discloses Cyberattack on C-Track Court Management Platform Affecting US and Canadian Records
Thomson Reuters has disclosed a cybersecurity breach targeting the "C-Track" platform operated by its West Publishing unit, resulting in unauthorized access to digitized court records and case management files across North America.
Internal investigations revealed that an unauthorized entity gained access to specific C-Track files within a company cloud environment in March, with the breach officially discovered on June 30. The compromised records include the names and personal data of individuals who were parties to lawsuits or referenced in official court documents.
Geographical Impact of the Breach
RegionAffected Jurisdictions
United StatesAlabama, Pennsylvania, Kentucky, Montana, Nevada, North Dakota, South Carolina, Tennessee, Ohio, New Hampshire, and Wyoming.
US TerritoriesUS Virgin Islands.
CanadaThree courts located in Ontario.
Incident Response and Current Operational Status
Following the discovery, Thomson Reuters initiated immediate containment protocols to secure the C-Track environment.
Investigation and Notification: The company retained independent cybersecurity experts to lead the forensic investigation and formally notified law enforcement agencies alongside impacted clients.
System Integrity: Thomson Reuters confirmed that the breach did not cause any operational downtime for the C-Track platform. All related products and services continue to function securely and at full capacity.
Pending Details: The exact volume of the compromised data, the specific nature of all exposed information, and the identity of the threat actors remain undetermined at this stage of the investigation.
To manage the fallout and assist impacted parties, Thomson Reuters Canada is scheduled to launch a dedicated contact and response center to field inquiries starting September 4.