C-Track

Summary

A cyberattack on C-Track, a Thomson Reuters subsidiary that manages state court records, exposed a subset of those records across eleven states, some of which may contain personal identification information and could include confidential, redacted, or sealed documents. The breach was identified later, and the company stated that the incident did not stem from weaknesses in the court systems’ own security measures and that there is no evidence that financial transaction systems were affected.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Thomson Reuters Corp. operates a subsidiary named C-Track that manages state court records systems. This subsidiary was subjected to a cyberattack earlier this year. The attack took place in March and was directed at C-Track specifically. The cybersecurity incident affected systems across eleven states. The breach was not identified until June 30, when it was discovered. Upon discovery, Thomson Reuters issued a news release describing the event.

The release indicated that only a subset of the court records stored on the affected systems were involved. Some of these records may contain personal identification information of individuals. The release also noted that confidential, redacted, and sealed court records could have been accessed during the incident. Despite the potential exposure of sensitive data, C-Track stated there is no evidence that its financial transaction systems were impacted. The release emphasized that the breach did not result from any deficiencies in the security measures of the state court systems themselves.

The news release provided the confirmed timeline of the March compromise and the June 30 discovery. The release did not include technical details about the attack method or the identity of any threat actors. It focused on the scope of accessed records and the lack of impact on financial transaction systems. The release conveyed the information described above to the public.

Sources

Sources available to members: 2 sources.