Thomson Reuters reports a C-Track cyber incident affecting court case files across U.S. and Canadian systems.
Thomson Reuters has reported a cybersecurity incident involving C-Track, its court case management system used by judicial systems in the U.S., Canada and the U.S. Virgin Islands.
According to Reuters, the company found that an unauthorized party accessed certain C-Track files in March. Some court records were affected, including files containing names and personal information.
The incident affected court systems across several U.S. states, including Alabama, Kentucky, Montana, Nevada, North Dakota, Ohio, Pennsylvania, South Carolina, Tennessee, New Hampshire and Wyoming, along with the U.S. Virgin Islands and Ontario courts in Canada.
Thomson Reuters said it took containment and security steps, notified affected customers and worked with independent cybersecurity experts to investigate and validate remediation measures.
The company said there has been no operational disruption to C-Track and that its products and services remain fully operational.
Ontario courts said Thomson Reuters discovered unauthorized activity in one of its cloud environments and responded by securing the C-Track environment, engaging external experts and notifying law enforcement.
The incident highlights a growing risk for legal and public-sector technology systems. Court platforms hold sensitive information, and even when operations continue, a breach can create notification, privacy and trust challenges across multiple jurisdictions.
For courts and vendors, the priority is not only securing core systems. It is also understanding how shared cloud platforms, third-party tools and connected case management environments can expand the impact of a single cyber incident.
