Incident
Published 2026-09-02
Updated 2026-11-02
Verified 2026-11-02

Thomson Reuters C-Track: unauthorised access to court case files across US court systems and the U.S. Virgin Islands

West Publishing Corporation (Thomson Reuters Court Management Solutions) notified courts that an unauthorised party obtained files from the C-Track appellate case-management platform in March 2026; activity was discovered 30 June 2026.

The Supreme Court of Ohio public statement says ten of twelve Ohio Courts of Appeals use C-Track hosted by the Court and managed by TRCMS; the 8th and 10th districts do not and are unaffected; TRCMS told the Court on 31 August 2026 that unauthorised access hit the production platform. The TRCMS C-Track notification lists the affected courts, including the U.S. Virgin Islands Supreme and Superior Courts and the Wyoming Judicial Branch; a subset of records could include names, Social Security numbers, driver’s licence numbers, dates of birth, medical and health-insurance information; certain confidential, redacted or sealed information may have been impacted for some courts; C-Track says it has no evidence of fraud or misuse to date and offers complimentary Experian monitoring via engagement B171847. (source: TRCMS C-Track notification)

Correction (02 Nov 2026): removed The Hacker News as a source; removed details no other source gives. (source: Supreme Court of Ohio; TRCMS C-Track notification)

Product
Thomson Reuters / West Publishing C-Track court case management
Exploited in Australia?
unknown
Patch to
Courts and counsel: follow TRCMS notices; enrol monitoring if in scope; rotate any exposed credentials tied to C-Track filings

breaches identity