Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data
Summary
Thomson Reuters has announced a data breach affecting its C-Track court case management software. The breach, discovered on June 30, 2026, occurred in March 2026 and may have exposed sensitive information including Social Security Numbers and sealed data from courts in 11 U.S. states, the U.S. Virgin Islands, and Ontario, Canada.
IFF Assessment
The exposure of sensitive personal data like Social Security Numbers is detrimental to individuals and creates significant risks for defenders.
Defender Context
This incident highlights the ongoing risks associated with third-party software and the critical need for robust security measures in handling sensitive court data. Defenders should be aware of potential phishing campaigns or social engineering attempts leveraging this breached information and ensure their own systems are protected against similar unauthorized access.