Thomson Reuters reports cyber incident involving C-Track court platform files
A Thomson Reuters division has identified a cyber incident involving the C-Track court case management platform. The incident affected court systems in 11 U.S. states, the U.S. Virgin Islands and Canada. The company said an unauthorized party gained access to certain C-Track files.
Access to files
According to Channel NewsAsia, citing Reuters, the cyber incident was detected on June 30. A subsequent Thomson Reuters investigation found that a third party accessed certain platform files in March.
A website created by Thomson Reuters to provide information about the incident states that certain court records containing names and personal information were affected. However, the exact scope of data that may have been compromised is currently unclear.
According to the West Publishing website, a Thomson Reuters division, the incident affected court systems in Alabama, Pennsylvania, Kentucky, Montana, Nevada, North Dakota, South Carolina, Tennessee, Ohio, New Hampshire, Wyoming and the U.S. Virgin Islands.
More current news is available on the UA.News Telegram channel Telegram.
Measures by the company and Ontario courts
The chief justices of the Ontario Court of Appeal, the Ontario Superior Court of Justice and the Ontario Court of Justice said that Thomson Reuters detected unauthorized activity in one of its cloud environments. According to them, the company contained the activity, engaged external cybersecurity specialists, notified law enforcement and secured the C-Track environment.
Thomson Reuters confirmed that it had taken security measures and notified customers affected by the incident. A company representative said that C-Track operations were not interrupted and that Thomson Reuters products and services remain fully operational. Independent cybersecurity experts joined the investigation and confirmed the remediation measures implemented.
Ontario courts said the incident may have affected the personal data of people involved in court proceedings or mentioned in court documents. Thomson Reuters Canada was to open a contact center on September 4; the company also confirmed the operation of a contact center for inquiries in the United States and Canada. Reuters was unable to independently determine those responsible for the incident or specific details about the compromised information.
