Thomson Reuters Reports Cybersecurity Incident, Unauthorized Party Accessed Court Files
Thomson Reuters has disclosed a cybersecurity incident involving its C-Track case management platform, which is used by courts to manage digital records. The company said an unauthorized party gained access to certain files, some of which contained names and personal information from court records.
The incident affected court systems across 11 US states, the US Virgin Islands and Canada, including courts in Ontario. Thomson Reuters detected the cybersecurity incident on June 30, 2026, and subsequently launched an investigation into the activity.
What happened in the Thomson Reuters breach?
According to Thomson Reuters, its investigation found that an unauthorized party had obtained certain C-Track files as early as March 2026. The company said the affected files included some court records containing names and other personal information.
The incident involved a cloud environment used by the company. Thomson Reuters has not yet determined the full extent of the information that may have been accessed.
The affected jurisdictions include Alabama, Pennsylvania, Kentucky, Montana, Nevada, North Dakota, South Carolina, Tennessee, Ohio, New Hampshire, Wyoming and the US Virgin Islands. Three Ontario courts also use the C-Track platform for digital court record management.
Thomson Reuters takes steps to secure systems
After detecting the incident, Thomson Reuters said it took steps to secure the affected environment and brought in cybersecurity experts to assist with the investigation. The company also notified law enforcement about the incident.
Court officials in Ontario also acknowledged the incident. A statement from the chief justices of three Ontario courts confirmed that their systems use C-Track and that they were working with Thomson Reuters following the cybersecurity incident.
C-Track remains operational
Despite the incident, Thomson Reuters said the C-Track platform remains operational and safe to use. The company is continuing its investigation to determine what information was accessed and the number of individuals who may have been affected.
Thomson Reuters is also establishing a dedicated support centre for questions related to the incident in both the US and Canada.
The incident highlights the security challenges facing systems that manage sensitive court information, particularly when such platforms operate across multiple jurisdictions. Thomson Reuters has not disclosed who was responsible for the unauthorized access, while the investigation remains ongoing.
