A Thomson Reuters breach affected court systems across 11 US states, the US Virgin Islands and Ontario, Canada, after an unauthorised party accessed files on its C-Track case management platform.

The company said it detected suspicious activity in one of its cloud environments on June 30. A later investigation found that certain C-Track files had been accessed in March.

Court records included personal information

Thomson Reuters said some affected court records contained names and personal information. However, the company has not disclosed what specific data was compromised or how many individuals may be affected.

People involved in court proceedings or named in court documents could have had their personal information exposed. The company has also not identified the party responsible for the intrusion.

C-Track is used by courts to manage digital case records and related court processes.

Multiple US jurisdictions affected

The Thomson Reuters breach affected court systems in Alabama, Pennsylvania, Kentucky, Montana, Nevada, North Dakota, South Carolina, Tennessee, Ohio, New Hampshire and Wyoming.

The incident also affected the US Virgin Islands and Ontario. The chief justices of Ontario’s Court of Appeal, Superior Court of Justice and Court of Justice said the company had taken steps to contain the activity.

Thomson Reuters worked with Ontario’s Ministry of the Attorney General and the affected courts during the response.

C-Track remains operational

Thomson Reuters said it engaged external cybersecurity experts, notified law enforcement and secured the C-Track environment. It has also notified affected customers.

The company said the incident had not disrupted C-Track operations. It added that its products and services remain fully operational and safe to use after remediation measures were validated.

Thomson Reuters Canada is responding to inquiries in both countries and planned to open a contact centre on September 4. The company has not provided further details about the affected files or the source of the breach.


0 responses to “Thomson Reuters Breach Hits US and Canadian Courts”