Thomson Reuters Reveals Hack of Court Case Management System

Media/technology company Thomson Reuters has reported a cybersecurity incident involving its case management system.

The incident was detected in 11 U.S. states, as well as in Canada and the U.S. Virgin Islands and involved the company’s C-Track tool, used for managing court cases, Reuters — itself a division of Thomson Reuters — reported Thursday (Sept. 3). The company confirmed for the news outlet that it had taken containment and security steps and notified affected customers.

According to the report, an investigation found that an unauthorized party accessed certain C-Track files in March, and that some court records were “affected,” including ones featuring names and personal information.

The breach impacted court systems of Alabama, Pennsylvania, Kentucky, Montana, Nevada, North Dakota, South Carolina, Tennessee, Ohio, New Hampshire, Wyoming and the U.S. Virgin Islands, along with those of the Court of Appeal for Ontario, the Ontario ​Superior Court of Justice and the Ontario Court of Justice.

A statement from those courts said Thomson Reuters discovered unauthorized activity in one of its cloud environments, and had taken measures to contain ​the activity, in cooperation with Ontario’s Ministry of the Attorney General ​and the courts.

“We are advised that Thomson Reuters responded by taking ​steps to contain the activity, engaging external cybersecurity experts to advise and investigate, notifying law ​enforcement, and securing the C-Track environment,” the statement said.