Ethical Hacking News
Thomson Reuters has disclosed a significant breach of sensitive personal data, affecting 11 U.S. states and Canada. The exposed data includes individuals' names, Social Security numbers, and health information. The breach has sparked concerns about cybersecurity in the justice system and the need for robust security measures to protect sensitive data.
Thomson Reuters suffered a significant breach of sensitive personal data in March 2026, affecting 11 US states and Canada. The exposed data includes names, Social Security numbers, driver's license numbers, medical information, and health insurance details. The breach was discovered by West Publishing on June 30, 2026, and affected multiple courts across the US and Canada. Thomson Reuters is offering credit monitoring services to potentially affected individuals. A criminal investigation is underway by the North Dakota Court System, while other courts have reported no impact from the breach. The incident highlights concerns about the vulnerability of court case management systems to cyber-attacks and the need for robust security measures.
Thomson Reuters, a leading provider of court case management platforms, has recently disclosed a significant breach of sensitive personal data. The breach, which occurred in March 2026, affected 11 U.S. states, the U.S. Virgin Islands, and Ontario, Canada. The exposed data includes individuals' names, Social Security numbers, driver's license numbers, dates of birth, medical information, and health insurance information.
The breach was discovered by West Publishing, the West Publishing Corporation unit that sells the C-Track court case management platform, on June 30, 2026. An unauthorized party had obtained files from the platform, which contained a subset of court records. The affected courts include Alabama, Kentucky, Montana, Nevada, New Hampshire, North Dakota, Ohio, Pennsylvania, South Carolina, Tennessee, and Wyoming, as well as the U.S. Virgin Islands and Ontario, Canada.
The data breach has significant implications for the affected individuals, as it may have exposed personal and sensitive information. The breach also raises concerns about the security measures in place to protect sensitive data. In response to the breach, Thomson Reuters has offered 12 months of Experian IdentityWorks credit monitoring to potentially affected individuals. Enrollment for the service is open until December 31, 2026, and a hotline has been established at 1-833-918-5294, requiring the engagement number B171847.
In Canada, Thomson Reuters Canada Limited has offered 12 months of TransUnion myTrueIdentity monitoring to affected individuals. The company has stated that there is no evidence to date of fraud or misuse of the information. However, the company acknowledges that certain confidential, redacted, or sealed information may have been impacted for certain affected courts.
The breach has also prompted an investigation by the North Dakota Court System, which has stated that there is an active criminal investigation into the incident. The state's district courts and Odyssey system are unaffected, and there is no indication that the unauthorized third party distributed the Kentucky data.
The incident has sparked concerns about the vulnerability of court case management systems to cyber-attacks. The breach highlights the need for robust security measures to protect sensitive data, particularly in the context of court proceedings. As the use of technology in the justice system continues to increase, it is essential that courts and law enforcement agencies prioritize cybersecurity and take proactive steps to prevent similar breaches in the future.
In this article, we will delve deeper into the context of the Thomson Reuters court software breach, exploring the potential implications for affected individuals and the broader implications for cybersecurity in the justice system.
Related Information:
https://www.ethicalhackingnews.com/articles/Thomson-Reuters-Court-Software-Breach-A-Deep-Dive-into-the-Exposed-Personal-Data-ehn.shtml
https://thehackernews.com/2026/09/thomson-reuters-court-software-breach.html
https://www.infosecurity-magazine.com/news/us-canada-court-breach-thomson/
Published: Thu Sep 3 12:48:43 2026 by llama3.2 3B Q4_K_M