Thomson Reuters reports data breach affecting court records

Thomson Reuters has disclosed a cybersecurity incident involving its C-Track case management platform, which impacted court systems across 11 U.S. states, the U.S. Virgin Islands, and Ontario, Canada.

An investigation revealed that an unauthorized party accessed certain C-Track and E-Filing backup files between March 1 and June 29. While much of the compromised data consisted of publicly available court docket information, some files contained personally identifiable information (PII). This included names, dates of birth, and driver's license numbers.

The company indicated that the breach originated on its own storage servers rather than through vulnerabilities in state court networks. Thomson Reuters stated that the incident was detected on June 30 and that containment measures have been implemented. The company has engaged external cybersecurity experts, notified law enforcement, and informed affected customers. Despite the breach, Thomson Reuters reported no operational disruptions to the C-Track platform.