Confidential, redacted and sealed material held by Ontario’s three main courts may have been caught up in a cyberattack on the case management platform the courts use to store documents and records, the company that runs the platform says — and anyone affected is being offered two years’ worth of free credit monitoring to enrol in by the end of the year.
C-Track Canada, the court management system owned by Thomson Reuters Canada, says it discovered unauthorized activity by a third party on June 30, 2026. Its investigation found that the intrusion had actually happened months earlier: in March 2026, an unauthorized party obtained files belonging to the Court of Appeal for Ontario, the Ontario Superior Court of Justice and the Ontario Court of Justice.
“A subset of court records were affected, some of which could potentially contain individuals’ names and personal information,” the company says in its notice. “Certain confidential, redacted or sealed information may have been impacted for certain affected courts.”
Sealed and redacted material is the part that will worry people most. Courts seal records precisely because their contents are sensitive — the identities of young people, the names of complainants in sexual offence cases, financial disclosure in family matters, information that a judge has ruled the public may not see.
What the courts say
Ontario’s three chief justices issued a public statement on September 2 confirming the breach and saying the Ministry of the Attorney General was notified on July 23. They stressed that the intrusion did not come through the courts’ own networks and has not interrupted court business.
“We want to assure the public that this incident has in no way affected the ability of the courts to operate, and the judiciary continues to fulfill its responsibility to the public to hear and decide cases,” the chief justices wrote, adding that the three courts are working with the Ontario government’s Cyber Security Division to assess the response.
C-Track says there is no evidence that systems used to process financial transactions were touched, and no evidence so far that the stolen material has been used for fraud.
What affected people can do
Thomson Reuters Canada has set up a dedicated notification site and a call centre at 1-833-918-4543, open weekdays from 8 a.m. to 8 p.m. Eastern. It is offering a complimentary 12-month subscription to TransUnion Canada’s myTrueIdentity service, which includes credit monitoring, dark web monitoring and identity restoration support with up to $1 million in expense reimbursement insurance.
The enrolment deadline is December 31, 2026 — after that, the free offer closes.
The same breach reached court systems in the United States as well.
