Kentucky Appellate Court Data Breach Traced to Third-Party Vendor The Kentucky Administrative Office of the Courts (AOC) confirmed a cybersecurity breach compromising appellate court data, linked to a third-party vendor, Thomson Reuters Court Management Solutions (Thomson Reuters CMS). The incident originated in the C-Track case management platform, used by the Kentucky Supreme Court and Court of Appeals to handle case records. The breach was not isolated to Kentucky Thomson Reuters CMS reported unauthorized access to C-Track systems across multiple states. However, Kentucky’s trial court records, which are not managed by third-party vendors, remained unaffected. The AOC stated that appellate court operations continued normally, with no operational disruptions. Thomson Reuters CMS detected the breach and is working with cybersecurity specialists and law enforcement to investigate. While the company has implemented mitigation measures to prevent future unauthorized access, the full scope of exposed data is still under review. No evidence suggests Kentucky’s compromised data was shared or distributed. Affected individuals or organizations will be notified directly by Thomson Reuters CMS, which will provide 12 months of complimentary credit monitoring and identity theft protection. The AOC has urged the vendor to expedite the review process, though the total number of impacted parties remains undetermined. The AOC is actively monitoring the situation, coordinating with the National Center for State Courts, and collaborating with other affected states. Thomson Reuters CMS has committed to covering all breach-related costs, including notifications once affected parties are identified. The investigation remains ongoing.

Minnesota Judicial Branch Suffers Security Breach, Exposing User Data The Minnesota Judicial Branch has confirmed a security breach that compromised user data, marking a significant cybersecurity incident for the state’s court system. While specific details about the scope of the breach including the type of data exposed and the number of affected individuals remain undisclosed, the incident highlights vulnerabilities in public sector digital infrastructure. The breach was reported amid unrelated local developments, including a partnership between the Mayo Clinic and the Rochester Salvation Army to address chronic pain and the arrest of a 22-year-old Winona man for the sexual assault of a minor. The timing underscores the growing intersection of cybersecurity risks with critical public services. No further information on the breach’s origin, whether it was the result of a cyberattack or internal failure, has been released. The incident serves as a reminder of the persistent threats facing government systems handling sensitive citizen data.