Thomson Reuters Discloses Cyber Incident Affecting Court Records.
✧ GENERATE BRIEFING +
Thomson Reuters has officially disclosed a cybersecurity incident impacting its C-Track case management platform, a core digital system utilized for handling court records across multiple jurisdictions in the United States and Canada. Discovered on June 30, 2026, internal investigations revealed that an unauthorized party accessed specific server files as early as March. The breach affects court systems spanning 11 U.S. states, the U.S. Virgin Islands, and Ontario, Canada, potentially exposing sensitive court documentation containing individual names and associated personal data, though the full extent of the data exposure remains under evaluation. In response, Thomson Reuters engaged external cybersecurity experts, notified law enforcement authorities, and executed rigorous containment and remediation protocols while ensuring the C-Track platform maintained uninterrupted operational continuity. Impacted institutional customers across North America have been notified, and the company is launching a dedicated support call center on September 4 to address public and stakeholder inquiries regarding the incident.
Thomson Reuters has disclosed a cybersecurity incident involving its C-Track case management platform, which is used to manage digital court records in the United States and Canada.
The company detected the incident on June 30, 2026, and found that an unauthorised party had accessed certain files in March. The affected systems involve courts in 11 US states, the US Virgin Islands and Ontario, Canada.
The compromised files contained court records that may include names and other personal information. Thomson Reuters said the full scope of the data accessed has not yet been determined, meaning the number of individuals potentially affected remains unclear.
The company said it brought in external cybersecurity specialists, notified law enforcement and implemented containment and remediation measures. It added that the C-Track platform continued operating without disruption.
Affected customers in the US and Canada have been notified. Thomson Reuters is also establishing a call centre from September 4 to respond to questions regarding the incident.
