NEW YORK — September 3, 2026 — Thomson Reuters has disclosed a cybersecurity incident involving its C-Track court case-management platform, with court systems across 11 U.S. states and the U.S. Virgin Islands affected.

The company said it detected unauthorized activity in a cloud environment on June 30 and subsequently determined that an unauthorized party had obtained certain C-Track files as early as March. Some affected court records contained names and personal information.

The affected jurisdictions include Alabama, Pennsylvania, Kentucky, Montana, Nevada, North Dakota, South Carolina, Tennessee, Ohio, New Hampshire and Wyoming, as well as the U.S. Virgin Islands.

Court Data Security Under Spotlight

The incident has raised concerns because C-Track is used to manage digital court records and filings.

Officials in several states have emphasized that the incident involved the technology vendor rather than a failure of their own court networks. Ohio's Supreme Court said C-Track is used by 10 of the state's 12 Courts of Appeals for filings and related documents.

The incident highlights the growing cybersecurity risks facing cloud-based systems that store sensitive legal and personal information.

Thomson Reuters said it took steps to contain the activity, secured the C-Track environment, brought in independent cybersecurity experts and notified law enforcement and affected customers. The company also said C-Track remains operational.

Investigation Continues

The precise scope of the information accessed has not yet been fully determined.

Officials have warned that people involved in court proceedings or named in court documents could potentially have had personal information included in the affected records.

The investigation now centers on what information was accessed, how the unauthorized party obtained it and whether additional individuals need to be notified.

The incident is likely to increase scrutiny of cybersecurity protections surrounding legal technology providers as courts increasingly depend on cloud-based platforms for electronic filing and case management.