Thomson Reuters detected a cybersecurity incident on June 30 involving its C-Track case management platform across 11 US states, the US Virgin Islands, and Canada. ^[1] Thomson Reuters stated that an unauthorized party obtained certain C-Track files in March. ^[2] The unauthorized intrusion exposed court records and personal information across 11 US states, the US Virgin Islands, and Ontario, Canada. ^[3] Thomson Reuters confirmed on June 30, 2026, that a cyberattack occurred in March 2026 targeting its C-Track court management system. ^[4] The compromised files included names and personal information of individuals involved in court proceedings or mentioned in court documents. ^[5] The incident affected court systems in Alabama, Pennsylvania, Kentucky, Montana, Nevada, North Dakota, South Carolina, Tennessee, Ohio, New Hampshire, Wyoming, and the U.S. Virgin Islands. ^[6] A Thomson Reuters spokesperson said on June 30, 2026, that there has been no operational disruption to C-Track as a result of the incident. ^[7] West Publishing said it discovered the unauthorized activity on June 30, 2026, affecting courts in 11 U.S. states, the U.S. Virgin Islands, and Ontario, Canada. ^[8] West Publishing stated that a subset of court records could contain individuals' names, Social Security numbers, driver's license numbers, dates of birth, medical information, and health insurance information. ^[9] The Hacker News reviewed the West Publishing notice on September 3, 2026, noting it lists 24 court bodies in 11 states and the U.S. Virgin Islands, with Minnesota absent from the list. ^[10]