A platform used by courts across North America may have exposed sensitive records, but the company says its services remain operational and secure.
A division of Thomson Reuters has detected a cybersecurity incident involving the C-Track court case management platform. The incident came to light on June 30 after unauthorized activity was detected in 11 U.S. states, the U.S. Virgin Islands, and Canada.
Based on data from Reuters
A subsequent investigation found that, in March, an unauthorized party had accessed certain C-Track files. On a dedicated information website, the company said that the affected materials may have included court records containing names and personal information.
The incident affected court systems in Alabama, Pennsylvania, Kentucky, Montana, Nevada, North Dakota, South Carolina, Tennessee, Ohio, New Hampshire, Wyoming, and the U.S. Virgin Islands.
The Chief Justices of the Court of Appeal for Ontario, the Superior Court of Justice of Ontario, and the Ontario Court of Justice said that Thomson Reuters had detected unauthorized activity in one of its cloud environments. The company worked to contain the incident in cooperation with Ontario’s Ministry of the Attorney General and the courts.
We were informed that Thomson Reuters took steps to contain the activity, engaged external cybersecurity experts for consultation and investigation, notified law enforcement, and secured the C-Track environment.
– The Chief Justices of Ontario’s three courts
The Toronto-based company confirmed that it had taken steps to contain the incident and strengthen security. Clients who may have been affected by the incident have already been notified.
The operation of C-Track was not disrupted as a result of this incident. Our products and services are fully operational and remain safe to use. Independent cybersecurity experts assisted with the investigation and confirmed the effectiveness of the remediation measures implemented.
– A Thomson Reuters representative
At the same time, the Chief Justices of Ontario’s courts emphasized that it is not yet clear exactly what data may have been compromised. The incident could potentially involve the personal information of people who participated in court proceedings or were mentioned in court documents.
Thomson Reuters’ Canadian division will respond to inquiries about the incident. The company also plans to open a contact center, which will begin operating on September 4.
