A unit of Thomson Reuters detected a cybersecurity incident on June 30, 2026, involving its C-Track case management platform, which is used for digital court record management in 11 U.S. states, the U.S. Virgin Islands, and Canada. A subsequent investigation by the company found that an unauthorized party had obtained certain files from the system in March 2026.
The C-Track platform, managed by the company’s West Publishing unit, serves court systems in Alabama, Pennsylvania, Kentucky, Montana, Nevada, North Dakota, South Carolina, Tennessee, Ohio, New Hampshire, Wyoming, and the U.S. Virgin Islands. In Canada, the incident affected the cloud environment used by the Court of Appeal for Ontario, the Ontario Superior Court of Justice, and the Ontario Court of Justice.
Thomson Reuters stated that the affected files included names and personal information, though the specific details and the total number of individuals affected have not been determined. The company reported that it engaged external cybersecurity experts, notified law enforcement, and implemented remediation measures to secure the environment. A spokesperson confirmed there has been no operational disruption to the platform and that products remain safe to use.
According to a statement by chief justices of three Ontario courts, individuals involved in court proceedings or mentioned in court documents could have had personal information relating to them involved in the incident. The company investigation found that affected records included names and personal information, which a summary of the incident described as "sensitive identifiers."
Thomson Reuters Canada is scheduled to activate a call center on September 4 to respond to inquiries, while the company continues to respond to inquiries across the U.S. and Canada. --- WHO: Thomson Reuters, West Publishing unit, and court systems in the U.S. and Canada. WHAT: Cybersecurity incident involving C-Track court management platform. WHEN: Detected June 30, 2026; initial access occurred in March 2026. WHERE: 11 U.S. states, the U.S. Virgin Islands, and Ontario, Canada. WHY: Unauthorized access to court records containing names and personal information.