A hack at a software vendor has exposed personal data held by Minnesota’s courts and by courts in several other states. The vendor is Thomson Reuters, whose C-Track product Minnesota uses to manage and process court case filings.
Thomson Reuters said C-Track found unauthorized activity involving certain files on June 30, 2026. The investigation traced the intrusion back to March 2026, when an outside party obtained files from the system.
The Minnesota Judicial Branch said case documents such as orders and briefs were not taken. A spokesperson noted that most court case information is public, but some of it contains private details. Affected data could include a person’s name along with one or more of the following: Social Security number, driver’s license number, medical information, date of birth and health insurance information. Some courts may also have had confidential, redacted or sealed material exposed.
Minnesota was not alone. The same party also obtained files tied to appellate courts in Alabama, Kentucky, Montana, Nevada, North Dakota, South Carolina, Tennessee, New Hampshire, Wyoming and the U.S. Virgin Islands. Multiple Ohio appellate courts were hit, as were several Pennsylvania bodies: the Environmental Hearing Board, the Courts of Common Pleas of Monroe County and Washington County, and the Fifth Judicial District.
The Minnesota branch cut off Thomson Reuters’ access to the courts’ electronic environments, audited accounts, brought in outside technology experts and state authorities, and reported the breach to law enforcement.
“I am deeply troubled that our court users’ data has been compromised and want to assure you we will do everything possible to get to the bottom of this and ensure your information remains safe,” Chief Justice Natalie Hudson said. She said the branch was working with Thomson Reuters and its own cybersecurity staff on a full investigation into the root cause and scope.
What users must do
Users of the appellate courts’ case management system were told to change their passwords. Anyone who logs in with an old one is locked out. C-Track said it has added security measures and is offering free credit monitoring and identity theft protection to affected people. It also said it has no evidence that financial transaction systems were hit, and none that the data has been used for fraud so far.
Questions go to [email protected]. C-Track also takes calls at 1-833-918-5294; callers give the engagement number B171847.
