Thomson Reuters Breach Exposes Court Records Across North America

Thomson Reuters detected a cybersecurity breach of its C-Track case management platform that exposed court records containing names and personal information of individuals involved in legal proceedings. The unauthorized access occurred in March, though the company did not detect the incident until June 30.

The breach affected court systems in Canada, the US Virgin Islands, and 11 US states. In response, the company contained the activity, notified law enforcement, and hired external cybersecurity experts to validate its remediation efforts. Thomson Reuters established contact centers in the US and Canada to manage inquiries from affected users.

The company stated that there was no operational disruption to C-Track services and that its products remain safe to use. In Canada, the Ministry Attorney General Ouss worked alongside the Superior Court of Justice of Ontario and the Court of Appeal for Ontario to contain the activity.