[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_pzt1tZfzqF-OHDGLhe9bXbOdOm5eGqQDxNB-yVR_7A":3},{"article":4,"iocs":52,"watch_terms":57,"solutions":58,"lesson":147},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"e3d5f256-4c90-4dfb-ad01-f2605d8f3519","Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data","thomson-reuters-court-software-breach-may-have-exposed-ssns-and-sealed-data-9fe0a5","Thomson Reuters disclosed on Wednesday that an unauthorized party obtained files from C-Track, the court case management platform sold by its West Publishing Corporation unit, in March 2026, affecting courts in 11 U.S. states, the U.S. Virgin Islands, and Ontario, Canada. West Publishing said it discovered the activity on June 30, 2026. A subset of court records could contain individuals' names","Thomson Reuters disclosed a breach of its C-Track court case management platform, affecting courts across 11 U.S. states, the U.S. Virgin Islands, and Ontario, Canada. The unauthorized access, which occurred between March and June 2026, may have exposed sensitive personal information including Social Security numbers, driver's license numbers, and medical details. The company is offering identity protection services to affected individuals.","Thomson Reuters court software breach exposed SSNs and sealed data in 11 US states and Canada.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F09\u002Fthomson-reuters-court-software-breach.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEiX1nx19KbhbT0_rYFjMzqgJuG35q7QvJiMrikolTZV9sWztkSoSFUr95E-h-9vHv-GBGmRHAyh5Du0DDMYMr1m0VbD5YgYO6dVoY7p8d6Z5BbORiBOGgJfZjg4euf9uwUkGO4ZX8QZXUpuU0CFUwNV46UozcdMJ9SyZ4T4cy4pAI9ho7xYQ8cDJaFdfKM\u002Fs1600\u002Freuters.jpg","2026-09-03T14:39:05+00:00","2026-09-03T18:00:13.3147+00:00",7,[17,20,23,25,27],{"name":18,"type":19},"C-Track","product",{"name":21,"type":22},"Thomson Reuters","vendor",{"name":24,"type":22},"West Publishing Corporation",{"name":26,"type":22},"Experian",{"name":28,"type":22},"TransUnion","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":29,"icon":31,"name":32,"slug":33},null,"Breaches","breaches",[35,37,42,47],{"category":36},{"id":29,"icon":31,"name":32,"slug":33},{"category":38},{"id":39,"icon":31,"name":40,"slug":41},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":43},{"id":44,"icon":31,"name":45,"slug":46},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":48},{"id":49,"icon":31,"name":50,"slug":51},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[53],{"type":54,"value":55,"context":56},"malware","B171847","Engagement number for hotline",[21,24,26],{"controls":59,"vendors":146},[60,88,117],{"slug":61,"name":62,"problem":63,"products":64},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[65,72,80],{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":67,"url":70,"description":71},"lansweeper","Lansweeper","\u002Fvendor-logos\u002Flansweeper.png","lansweeper-asset-inventory","https:\u002F\u002Fwww.lansweeper.com\u002Fproduct\u002Fasset-inventory\u002F","Discovery with and without agents that keeps one central, always-updated inventory of devices, software and their details.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-cyber-assets","Axonius Cyber Assets","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fcyber-assets","A continuously reconciled view of every asset, who owns it, which security controls cover it and where it drifts from policy.",{"slug":89,"name":90,"problem":91,"products":92},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",[93,101,109],{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"wiz","Wiz","\u002Fvendor-logos\u002Fwiz.png","wiz-cloud","Wiz Cloud","https:\u002F\u002Fwww.wiz.io\u002Fplatform\u002Fwiz-cloud","Agentless cloud security posture and attack path analysis across major cloud providers.",{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"orca-security","Orca Security","\u002Fvendor-logos\u002Forca-security.png","orca-cloud-security-platform","Orca Cloud Security Platform","https:\u002F\u002Forca.security\u002Fplatform\u002F","Agentless cloud security platform for posture, vulnerabilities and data exposure.",{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-cloud","Microsoft Defender for Cloud","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fcloud-security\u002Fmicrosoft-defender-cloud","Cloud posture management and workload protection for Azure, AWS and Google Cloud.",{"slug":118,"name":119,"problem":120,"products":121},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[122,130,138],{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":134,"product_name":135,"url":136,"description":137},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":139,"vendor_name":140,"vendor_logo":141,"product_slug":142,"product_name":143,"url":144,"description":145},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",[],{"slug":148,"title":149,"body":150,"framework_refs":151,"framework_notes":168},"court-case-management-platform-breach-exposes-ssns-and-sealed-records-across-11-states","Court Case Management Platform Breach Exposes SSNs and Sealed Records Across 11 States","The Thomson Reuters C-Track breach highlights the critical risk of storing highly sensitive government and personal data — including Social Security numbers, medical records, and sealed court documents — within third-party SaaS platforms without adequate access controls or monitoring. Unauthorized access persisted for approximately three months (March to June 2026), suggesting a significant failure in anomaly detection and real-time alerting that should have identified suspicious activity far sooner. Court case management systems are high-value targets precisely because they aggregate legally protected, sensitive data on a massive scale across multiple jurisdictions. The extended dwell time of the attackers amplifies the potential damage, as prolonged access allows for thorough data exfiltration that may not be fully scoped for weeks or months. This incident underscores that organizations processing government and legal data must hold their third-party vendors to the same — or higher — security standards they apply internally.",[152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167],"CIS Control 3 – Data Protection","CIS Control 6 – Access Control Management","CIS Control 8 – Audit Log Management","CIS Control 15 – Service Provider Management","NIST SP 800-53 AC-2 – Account Management","NIST SP 800-53 AC-6 – Least Privilege","NIST SP 800-53 AU-6 – Audit Record Review, Analysis, and Reporting","NIST SP 800-53 IR-6 – Incident Reporting","NIST SP 800-53 SC-28 – Protection of Information at Rest","NIST SP 800-53 SA-9 – External System Services","GDPR Article 5(1)(f) – Integrity and Confidentiality","GDPR Article 28 – Processor Obligations","GDPR Article 33 – Notification of a Personal Data Breach","ITIL Service Management – Supplier Management Practice","SOC 2 Trust Services Criteria – CC6 (Logical and Physical Access Controls)","SOC 2 Trust Services Criteria – CC7 (System Operations & Anomaly Detection)",{}]