Thomson Reuters Discloses C-Track Breach Affecting Courts in the U.S. and Canada

Summary

Thomson Reuters says unauthorized access to C-Track files began in March 2026 and was discovered June 30. Courts in the U.S., Canada, and the U.S. Virgin Islands were affected; the scope and data accessed remain unclear.

Key points

Thomson Reuters said an unauthorized third party obtained certain C-Track files in March 2026; the company discovered the activity on June 30.
Affected jurisdictions include courts in at least 12 U.S. states, the U.S. Virgin Islands, and Canada; Oregon’s appellate courts also confirmed impact.
Records may have included names, Social Security and driver’s license numbers, medical information, birth dates, and health insurance information.
Confidential, redacted, or sealed court information may also have been affected at some courts.
Thomson Reuters said the incident occurred in its own cloud environment, not through affected courts’ networks or systems.
C-Track remains operational, and the company says it added security measures reviewed by outside experts.
The company said it has no evidence that exposed information was misused and is offering affected individuals 12 months of credit monitoring and identity theft protection.

Article Details

Victim Organization: Thomson Reuters
Incident Type: Data breach involving unauthorized access to and acquisition of C-Track files
Incident Date: 2026-03-01
Data Types Exposed: Names
Social Security numbers
Driver's license numbers
Medical information
Dates of birth
Health insurance information
Confidential, redacted, or sealed court information
Affected Records: Unknown; the number of affected individuals and records was not disclosed.
Operational Impact: C-Track remains operational. Thomson Reuters said additional security measures were added. The company reported no evidence that the exposed information had been misused or that systems used to process financial transactions were affected.
Claim Status: confirmed

Vendors

Thomson ReutersThomson Reuters disclosed a breach affecting its C-Track court case management platform, exposing court records and sensitive personal information across multiple jurisdictions in the U.S., Canada, and the U.S.

Products

C-TrackThomson Reuters disclosed a breach affecting its C-Track court case management platform, exposing court records and sensitive personal information across multiple jurisdictions in the U.S., Canada, and the U.S.

Countries

CanadaThomson Reuters disclosed a breach affecting its C-Track court case management platform, exposing court records and sensitive personal information across multiple jurisdictions in the U.S., Canada, and the U.S.United StatesThe company published the disclosure publicly on Wednesday, along with separate notification pages for affected individuals in the United States and Canada.