Montana Supreme Court Data Breach Exposes Court Records Across Multiple States The Montana Supreme Court disclosed an unauthorized data breach affecting backup files in C-Track, a case management system operated by Thomson Reuters (West Publishing Co.). The incident, which spanned from March to June 2026, was detected on July 23, 2026, when Thomson Reuters notified the Montana Office of Court Administrator. The breach compromised backup data from multiple state courts, including Montana’s appellate and e-filing systems, though the vulnerability originated from Thomson Reuters’ systems not state court infrastructure. While most exposed data appears to be publicly available, investigators identified personally identifiable information (PII), such as driver’s license numbers and dates of birth, in some files. Thomson Reuters is reviewing the accessed data to assess the full scope of exposure and has launched a remediation program, offering 12 months of free credit monitoring and identity theft protection to affected individuals. Those potentially impacted can verify exposure via [ctracknotification.com](https://www.ctracknotification.com) or a dedicated hotline. The Montana court system, in collaboration with Thomson Reuters, the National Center for State Courts (NCSC), and other affected states, is conducting a thorough review to identify vulnerabilities and notify individuals whose PII may have been compromised. The breach did not involve court documents but included case details, party names, addresses, and some criminal charge records. Montana Chief Justice Cory Swanson emphasized the court’s commitment to transparency and security, noting that the incident prompted a coordinated response across impacted states. Public disclosure was delayed until September 2, 2026, to align with simultaneous announcements from other affected jurisdictions.

Thomson Reuters Cyberattack Exposes Court Documents Across North America A cyberattack targeting Thomson Reuters’ court management software has compromised files linked to judicial systems in 11 U.S. states, the U.S. Virgin Islands, and Canada, potentially exposing sensitive sealed documents. The breach, disclosed on September 2, 2024, raises concerns about the security of legal data and the integrity of court operations. Thomson Reuters, a major provider of legal and regulatory software, confirmed the incident affected its systems, though the full scope of exposed data remains under investigation. The attack highlights vulnerabilities in third-party legal tech infrastructure, which courts increasingly rely on for case management and document handling. The incident underscores the growing risks of cyber threats to judicial systems, where breaches could undermine confidentiality, disrupt proceedings, or compromise sensitive legal materials. Authorities and affected jurisdictions are assessing the impact, but details on the attack’s origin or responsible parties have not been publicly disclosed.

Alabama Appellate Courts Investigate Potential C-Track Data Breach The Alabama Appellate Courts are examining a possible data breach involving West Publishing Corp., the vendor behind the C-Track case management system used by the state’s appellate courts. The incident came to light after West Publishing notified the courts on July 23, 2026, revealing that unauthorized activity was detected on June 30, 2026, with files accessed as early as March 2026. While court officials confirmed that Alabama’s own systems were not compromised, the breach occurred within West Publishing’s environment. A subset of court records potentially including names, Social Security numbers, driver’s license numbers, dates of birth, medical information, and health insurance details may have been exposed. Some confidential, redacted, or sealed records could also have been affected, though the full scope remains under investigation. The courts later discovered that West Publishing had retained a backup of Alabama appellate court data in its cloud environment without their knowledge or consent. Despite this, officials emphasized that no evidence suggests Alabama’s court systems, e-filing, or financial transaction systems were impacted, and operations have continued uninterrupted. West Publishing has reported the incident to law enforcement and is working with cybersecurity specialists to investigate and address vulnerabilities. The company has pledged to notify affected individuals if their personally identifiable information (PII) was accessed, in compliance with Alabama law, and is offering credit monitoring and identity-theft protection services. The investigation remains ongoing, with the Alabama Appellate Courts closely monitoring developments. Individuals with concerns may contact C-Track at 1-833-918-5294 (reference engagement number B171847).

Cyberattack on Thomson Reuters Subsidiary Exposes Court Records in 11 States In March, a cyberattack targeted C-Track, a subsidiary of Thomson Reuters Corp. that manages state court records systems, impacting 11 states. The breach, discovered on June 30, involved a subset of court records, some of which contained personal identification information. Confidential, redacted, and sealed records may also have been accessed. Officials clarified that the incident did not stem from vulnerabilities in state court systems or their security measures. Additionally, there is no evidence that financial transaction systems were compromised. The attack highlights growing risks to legal and judicial data infrastructure, with potential implications for privacy and court operations across multiple jurisdictions. Thomson Reuters has not disclosed further details on the nature of the breach or the specific states affected.

In retaliation for a cyber attack by Russia against the Ukrainian telecom giant Kyivstar, hackers associated with Ukraine's primary intelligence agency have infiltrated the computer systems of a Moscow-based internet provider, Reuters reports. The hackers, allegedly linked to Ukraine's spy agency, erased 20 terabytes of data from M9 Telecom, a relatively small Russian internet and TV provider, resulting in some Moscow residents experiencing internet service disruptions. Despite the hacking group's assertion that the company's website had been destroyed, the extent of the successful breach could not be independently verified by Reuters.

Thomson Reuters provides customers with products such as the business-to-business media tool Reuters Connect, legal research service and database Westlaw, the tax automation system ONESOURCE, online research suite of editorial and source materials Checkpoint, and other tools. The size of the open database the team discovered corresponds with the company using ElasticSearch, a data storage favored by enterprises dealing with extensive, constantly updated volumes of data. Media giant with $6.35 billion in revenue left at least three of its databases open At least 3TB of sensitive data exposed including Thomson Reuters plaintext passwords to third-party servers The data company collects is a treasure trove for threat actors, likely worth millions of dollars on underground criminal forums The company has immediately fixed the issue, and started notifying their customers Thomson Reuters downplayed the issue, saying it affects only a “small subset of Thomson Reuters Global Trade customers” The dataset was open for several days – malicious bots are capable of discovering instances within mere hours Threat actors could use the leak for attacks, from social engineering attacks to ransomware