Ontario Court Records Exposed in Thomson Reuters Breach
The personal information of people involved in Ontario's court system may have been stolen in a cyberattack on an online case-management platform owned by Thomson Reuters Canada Limited, the province's chief justices are warning.
Key facts
What happened: A breach of C-Track, the case-management platform owned by Thomson Reuters Canada Limited and used to store and manage court documents and records Yahoo!
Timeline: Unauthorized activity detected June 30, 2026; the investigation determined the breach began months earlier, in March CBC News
Data at risk: Names and other personal information were potentially accessed; certain confidential, redacted or sealed information may have been impacted for some courts Yahoo!
Current status: No evidence of identity theft so far; courts continue operating normally Ernstversusencana
What happened to Ontario's court records?
Thomson Reuters detected unauthorized activity within one of its cloud environments on June 30. It contacted law enforcement and began an investigation, which determined that court records related to Ontario's three courts were obtained by an unauthorized party — and that the intrusion had started back in March, meaning the attackers had months of undetected access. CBC News
The courts and Ontario's Attorney General were notified on July 23, triggering consultations with Thomson Reuters and the province's cybersecurity experts to assess the scope and implications for court users. A public statement was posted September 2 by Ontario Chief Justice Michael H. Tulloch, Superior Court Chief Justice Patrick J. Boucher and Ontario Court of Justice Chief Justice Sharon M. Nicklas. ErnstversusencanaYahoo!
The company notes the incident was not caused by the courts' own networks or data security — this was a supplier breach. A supply-chain breach is when attackers compromise a vendor to reach the data or systems of that vendor's customers. CBC News
What information was taken?
That remains the central unanswered question. It is still unclear exactly what information was compromised, and Thomson Reuters says mitigation measures are in place while the full extent is investigated. The most sensitive possibility is confirmed as in scope: sealed and redacted court materials — the records courts deliberately keep from public view, often to protect victims, witnesses, minors or ongoing investigations. Ernstversusencana
Are Ontario's courts still operating?
Yes. Thomson Reuters says C-Track experienced no operational disruption, and Ontario's chief justices said the courts remain capable of carrying out their normal judicial responsibilities. U.S. court systems including North Dakota and Nevada similarly reported services continuing. That is reassuring, but availability is only one measure of cybersecurity — information can be copied without making a system unusable, and the central concern here is confidentiality, not an outage. Thomson Reuters also says it has found no evidence that systems processing court-related financial transactions were affected, and it has not publicly identified the attacker or a motive. Ontario court records caught in Thomson Reuters cyber breach spanning Canada and 11 US states +2
What should affected people do?
Anyone who has been party to an Ontario court proceeding should watch for official communications from the courts or Thomson Reuters, monitor accounts for signs of identity misuse, and treat unsolicited messages referencing their court matters with suspicion — breach news reliably spawns copycat phishing.
Sources: CBC News; National Magazine; statement of the Ontario chief justices.