Thomson Reuters C-Track breach exposes court files across U.S. and Canadian systems
West Publishing's C-Track notified the public on September 2, 2026 that an unauthorized party obtained court-management files after activity discovered on June 30, 2026, with files obtained in March. The notice lists appellate and other courts in multiple U.S. states, the U.S. Virgin Islands and three Ontario courts. Confidential, redacted or sealed information may have been impacted at some courts; South Carolina's preliminary review found no PII so far in 2020-and-earlier appellate backups.
Report (C-Track) → · Supreme Court of South Carolina, The Record, Help Net Security
Key points
- C-Track discovered unauthorized activity on June 30, 2026; investigation found files obtained in March 2026.C-TrackSupreme Court of South CarolinaThe Record
- Incident occurred in the vendor cloud environment, not court networks; C-Track remained operational.C-TrackSupreme Court of South CarolinaThe Record
- Possible PII includes names, SSNs, driver's license numbers, DOB, medical and health-insurance data.C-TrackThe RecordHelp Net Security
- Vendor notice: confidential, redacted or sealed information may have been impacted at some courts.C-TrackThe Record
- South Carolina preliminary review: 2020-and-earlier appellate backups; no confidential PII detected so far.Supreme Court of South Carolina
- Montana officials told The Record access ran March through June; company notice states March obtainment.C-TrackThe Record
Sources4 articles across 4 outlets
C-Track
Help Net Security
Supreme Court of South Carolina
The Record