Thomson Reuters Cyber Breach May Expose US and Canadian Court Records

Thomson Reuters has confirmed a cybersecurity incident that impacted its C-Track court management platform, raising concerns that sensitive court documents from both the United States and Canada could have been accessed by unauthorized parties.

The company disclosed that the breach affected the software used by a number of judicial bodies to manage case files, schedules, and related filings. While the exact scope of the data exposure remains under investigation, the incident highlights the vulnerability of digital court systems that store large volumes of confidential legal information.

Legal technology providers like Thomson Reuters have increasingly been tasked with modernizing court operations, moving away from paper‑based processes toward cloud‑based solutions. C-Track, a widely adopted system, enables courts to streamline case tracking and improve public access to docket information. However, the reliance on a single vendor also creates a concentrated attack surface, a risk that cybersecurity experts have warned about for years.

Officials in the affected jurisdictions have been notified and are reportedly reviewing their security protocols. The breach comes at a time when both U.S. and Canadian courts are expanding digital services, a trend accelerated by the COVID‑19 pandemic. Regulators may scrutinize the incident to assess whether existing data‑protection standards are sufficient for handling judicial records, which often include personal identifiers, evidence, and privileged communications.

Thomson Reuters said it is working with forensic investigators and law‑enforcement agencies to determine the cause and mitigate any further damage. The firm has pledged to enhance its security measures and to keep stakeholders informed as the investigation proceeds. Meanwhile, courts using C-Track are expected to conduct internal reviews and may consider temporary safeguards, such as limiting remote access or increasing monitoring of data flows, until the vulnerability is fully addressed.