Thomson Reuters
Sep 2026 · Graded Attested · Professional and Business Services · Beyond the filings
Incident summary
Thomson ReutersSep 2026
Not yet quantified
AAttestedThomson Reuters detected unauthorized activity in a C-Track cloud environment on June 30, 2026, three months after the intrusion it now traces to March. The stolen files touched court records and personal data across eleven states, the Virgin Islands, and Ontario; the company still cannot say what was taken or how many people were affected. One cloud platform running case management for a dozen jurisdictions turns a single failure into a multi-state event. We'll see if Thomson Reuters gets a "get out of jail free" card for this incident.
Professional and Business Services
Thomson Reuters hit by cyberattack that saw court documents across 11 states accessed by a hacker
Initial attack type not disclosed · Impact data theft confirmed
About this record
This incident is beyond the filings: attributed to a company statement, a regulator or court record, or a news report, and graded Attested or Inferred. Every figure links to the source it was read from; if we have read one wrong, tell us at info@hackerinahoodie.com. This index never sums figures across incidents. See the methodology.