Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data

Thomson Reuters disclosed on Wednesday that an unauthorized party obtained files from C-Track, the court case management platform sold by its West Publishing Corporation unit, in March 2026, affecting courts in 11 U.S. states, the U.S. Virgin Islands, and Ontario, Canada. West Publishing said it discovered the activity on June 30, 2026. A subset of court records could contain individuals' names

Reported facts: Thomson Reuters disclosed that an unauthorized party accessed files from its C-Track court case management platform in March 2026, impacting courts across multiple U.S. states, the U.S. Virgin Islands, and Ontario, with some records potentially containing sensitive personal data such as names and Social Security numbers. RealGround analysis: While the incident is about traditional court case management software, it highlights the risk of sensitive justice-sector data being exposed and later reused in AI systems without appropriate controls. Organizations integrating similar case management or legal data into AI workflows should strengthen access controls, data minimization, and breach response processes before connecting these systems to AI agents or models.