The Night Shift: Overnight Tech News with Jennifer Hudsen • 2:00 a.m. EDT edition • Cutoff September 3, 2026, 2:07 a.m. EDT / 06:07 UTC
ORIGINAL JENNIFER NEWSROOM EDITORIAL ART—not a Thomson Reuters, C-Track, court, filing, cloud interface or breach-evidence image.
C-Track Says an Unauthorized Party Obtained Court Files—What Potentially Affected People Should Do
Headline evidence: C-Track’s public incident notice says an unauthorized party obtained certain C-Track files. [1]
Status at cutoff: C-Track, owned by West Publishing Corporation, says it discovered unauthorized third-party activity on June 30 and later determined that an unauthorized party had obtained certain C-Track files in March 2026. [1] Its notice says a subset of court records was affected and that some records could potentially contain names, Social Security numbers, driver’s-license numbers, medical information, dates of birth or health-insurance information; it also says confidential, redacted or sealed information may have been affected for some courts. [1] The exact content and number of affected people remain unresolved in public statements. [2]
What happened
C-Track provides court-management technology. Its notice says it found unauthorized activity on June 30, engaged outside experts and law enforcement, contained the activity and secured its environment. [1] The investigation then traced the acquisition of certain files back to March. [1] That chronology matters: March is the company-reported file-access period, June 30 is the discovery date, and September 2 is the public-notice date. [5]
The current C-Track landing page names court systems in Alabama, Pennsylvania, Kentucky, Montana, Nevada, North Dakota, South Carolina, Tennessee, New Hampshire, Ohio and Wyoming, as well as the U.S. Virgin Islands. [1] Reuters reporting republished by CNA described the incident as reaching 11 U.S. states, the Virgin Islands and Canada. [4] An official North Dakota Court System page reproducing vendor notice text also names Oregon Appellate Courts. [5] What remains unknown: the opened sources do not establish why that Oregon entry appears on the North Dakota-hosted version but not the current C-Track landing page, so this article does not turn the discrepancy into a definitive state count. [1] [5]
Ontario’s three chief justices say C-Track is used by the Court of Appeal for Ontario, the Ontario Superior Court of Justice and the Ontario Court of Justice to store and manage some court documents and records. [2] Their statement says Thomson Reuters detected unauthorized activity in one cloud environment, advised Ontario’s Ministry of the Attorney General on July 23 that accessed data included some Ontario court information, and continued investigating the specific content, information types and number of people potentially affected. [2]
What the evidence does—and does not—show
The company says there was no operational disruption to C-Track. [5] It also says there is no evidence that systems processing financial transactions were affected. [1] Ontario’s courts likewise say the incident did not affect their ability to operate. [2] Those statements describe service availability and the currently known scope; they do not mean no files were obtained. [1]
C-Track says it has no evidence to date that the incident led to fraud or misuse of information. [1] Ontario’s courts separately say Thomson Reuters Canada reported no evidence of identity theft and no current indication that financial-transaction systems related to court proceedings were affected. [2] Important qualifier: “no evidence to date” is a point-in-time investigative statement, not proof that misuse cannot occur or has never occurred. [1] [2]
South Carolina’s judiciary provides a useful example of why jurisdiction-specific findings matter. Its September 2 statement says the affected South Carolina material appeared, on preliminary review, limited to appellate data from 2020 and earlier; it said no confidential personally identifying information had been detected at that stage and that the full scope remained under investigation. [3] That narrower South Carolina assessment cannot safely be generalized to every affected jurisdiction. [1] [3]
Reuters could not independently determine who was responsible or the specific details of the compromised information, and it disclosed that Reuters News is a division of Thomson Reuters. [4] We therefore treat the company notice and court statements as primary evidence about their own findings, not as independent proof of the incident’s full scale or actor identity. [1] [2]
Why it matters
Court records can mix public filings with sealed, redacted or personally sensitive material. C-Track’s own notice says certain confidential, redacted or sealed information may have been affected for some courts. [1] Our analysis: That creates a different risk profile from an ordinary service outage because the concern is not simply whether a portal works—it is whether files obtained from a vendor environment contained information that could support identity fraud, targeted scams, harassment or privacy harm. [1]
The vendor-versus-court distinction also matters. C-Track says the incident was not caused by the affected courts’ networks, systems or data security. [1] South Carolina says there is no indication that its appellate case-management system or another South Carolina court network was breached. [3] Our analysis: People should follow notices from their specific court and C-Track rather than assuming that every court account, payment system or local network was compromised. [1] [3]
Who may be affected
- People involved in court proceedings: Ontario’s chief justices say people involved in proceedings or mentioned in court documents could have had personal information involved, while the exact content remains unclear. [2]
- People tied to the named U.S. jurisdictions: C-Track’s notice lists specific appellate courts, selected Pennsylvania and Ohio courts, and other named systems; being a resident of a state alone does not establish that a person’s information was in the obtained files. [1]
- Attorneys, staff and other people named in records: The public evidence does not limit potential exposure only to parties who filed a case. [2]
- Users of unrelated court systems: The current notices do not establish that every court, every e-filing platform or every financial-transaction system was affected. [1]
What potentially affected readers should do
- Verify the jurisdiction and record connection. Start with the official C-Track notice and the official court website for the jurisdiction where you had a case or were named in a record. [1] Do not rely on an unsolicited caller or message claiming to know your case details; verify through the official notice or court site. [1]
- Use the official incident channel. The U.S. notice provides a toll-free information line and engagement number; the Ontario statement links a dedicated Canadian information site and says a Canadian call center is scheduled to become active September 4. [1] [2] Obtain contact details from those official pages instead of copying numbers from social posts or email. [1] [2]
- Enroll only through a verified route. C-Track says it is offering 12 months of complimentary Experian IdentityWorks access. [1] Confirm eligibility and enrollment instructions from the official notice before entering identity data. [1]
- Watch financial and identity activity. C-Track’s notice recommends remaining alert and includes instructions on credit reports, fraud alerts, security freezes and identity-theft reporting. [1] A freeze can reduce the risk of new-credit fraud, but it does not monitor every form of misuse or replace reviewing existing accounts. [1]
- Preserve suspicious messages. If someone references a court matter while demanding payment, credentials or urgent action, do not use the message’s links or phone number; verify through the official incident or court page. [1] Save the message, contact the court through its official website and report suspected identity theft or fraud through the government channels listed in the official notice. [1]
Upside, cautions and unknowns
Upside: The public notice provides a named set of court systems, an incident hotline, identity-protection enrollment and a chronology that gives potentially affected people a concrete place to begin. [1] Court statements also distinguish known vendor exposure from court-network compromise and say operations continued. [2] [3]
Caution: The categories of data are described as information that “could potentially” be present in a subset of records, not a confirmed list for every person or court. [1] Conversely, the absence of known fraud or identity theft at the reporting cutoff is not a guarantee against later misuse. [1] [2]
Unknown: Public sources do not yet establish the responsible actor, the number of people affected, a complete jurisdiction-by-jurisdiction data inventory, whether any obtained data was distributed, or a universal notification timeline. [2] [4]
Incident evidence ladder
| Question | Evidence at cutoff | Reader-safe interpretation |
|---|---|---|
| When did activity occur? | Files were obtained in March; activity was discovered June 30. [1] | Do not collapse access, discovery and disclosure into one date. [1] |
| Was service disrupted? | C-Track and courts say operations continued. [5] [2] | Operational continuity does not negate file acquisition. [5] |
| What data was involved? | A subset of records may contain listed personal information; exact scope varies and remains under review. [1] [3] | Potential categories are not confirmed exposure for every person. [1] |
| Is misuse confirmed? | C-Track and Ontario report no evidence to date. [1] [2] | Point-in-time status, not a lifetime guarantee. [1] [2] |
Frequently asked questions
Did hackers break into every listed court?
No such conclusion is supported. C-Track says the affected files were obtained from its environment and says the incident was not caused by the courts’ networks or systems. [1]
Does being named in a case mean my Social Security number was exposed?
Not necessarily. The notice lists data types that some affected records could potentially contain; it does not say every record contained every field. [1]
Should I stop using court services?
The company and court statements say C-Track remained operational and that court operations continued. [5] [2] Use official court channels and remain alert for impersonation attempts. [1]
Why is this a near-window fallback?
The Reuters report republished by CNA carries machine-readable publication metadata of September 2, 2026, 11:07 p.m. EDT—35 minutes before the prior desk’s 11:42 p.m. cutoff and within this edition’s six-hour fallback. [4] The strict core produced no stronger, fully verified, non-duplicate global technology development. [4]
Sources
- Website Notification — C-Track / West Publishing Corporation; public notice checked September 3, 2026.
- Public Statement by Ontario’s three Chief Justices Regarding a Cybersecurity Incident Related to the Ontario Courts — Ontario Courts; checked September 3, 2026.
- Judicial Branch Releases Statement on West Publishing Corporation C-Track Cybersecurity Incident — Supreme Court of South Carolina; September 2, 2026.
- Thomson Reuters detects cybersecurity incident, says unauthorized party accessed files — Reuters report republished by CNA; machine metadata published September 2, 2026, 11:07 p.m. EDT; the Reuters canonical page was blocked to the newsroom client.
- C-Track Data Incident — North Dakota Court System; September 2, 2026; official court-hosted reproduction that includes Oregon in the named-system list.
Reporting cutoff: September 3, 2026, 2:07 a.m. EDT / 06:07 UTC. This article covers one subject and was checked against The IT Guys’ prior 36 hours and earlier Night Shift editions.