Thomson Reuters Says Unauthorized Party Accessed C-Track Court Files

Summary
Thomson Reuters said an unauthorized party accessed C-Track files in March, affecting court systems in 11 U.S. states, the U.S. Virgin Islands and Canada. The scope of potentially exposed court records and personal information remains unclear.
Key points
- Thomson Reuters detected the incident on June 30; its investigation found that a third party accessed certain C-Track files in March.
- Affected court systems were reported in 11 U.S. states, the U.S. Virgin Islands and Canada.
- Some affected court records contained names and personal information, but the specific scope of potentially compromised data is unclear.
- Thomson Reuters said it contained the activity, secured the C-Track environment, engaged external cybersecurity specialists and notified affected customers.
- The company said C-Track operations were not interrupted and its products and services remained operational.
- Ontario courts said personal data of people involved in court proceedings or mentioned in court documents may have been affected; Reuters could not independently determine who was responsible or the specific compromised information.
Article Details
- Victim Organization
- Thomson Reuters
- Incident Type
- Unauthorized access to files in the C-Track court case management platform environment
- Data Types Exposed
- Names
- Personal information
- Court records
- Operational Impact
- Court systems in 11 U.S. states, the U.S. Virgin Islands, and Canada were affected. Thomson Reuters said C-Track operations were not interrupted and its products and services remained operational.
- Claim Status
- confirmed
Vendors
Products
Countries
Canadamanagement platform. The incident affected court systems in 11 U.S. states, the U.S. Virgin Islands and Canada. The company said an unauthorized party gained access to certain C-Track files.United Stateson September 4; the company also confirmed the operation of a contact center for inquiries in the United States and Canada. Reuters was unable to independently determine those responsible for the incident or
