Montana Supreme Court confirms records affected in nationwide C-Track data breach

The Montana Supreme Court disclosed Wednesday that backup data connected to the state’s court system was compromised as part of a broader breach affecting court systems across the country. Chief Justice Cory Swanson said the Montana Office of Court Administrator learned of the intrusion from Thomson Reuters, which operates the C-Track case management and electronic filing platform used by Montana’s Supreme Court, district courts and several lower courts.

Bowen Greenwood, Clerk of the Montana Supreme Court, said the scope of the exposed data means individuals connected to virtually any case handled in a Montana court could be affected.

Thomson Reuters told the state the intrusion began in March 2026 and continued until June, with unauthorized activity discovered June 30. The company identified access to court data from twelve jurisdictions: Kentucky, Alabama, Pennsylvania, Montana, Nevada, North Dakota, South Carolina, Tennessee, New Hampshire, Ohio, Wyoming and the U.S. Virgin Islands.

Montana’s court administrator, Dave McAlpin, was notified of the breach on July 23. Swanson said his office has spent the weeks since then trying to determine whether Montana residents were harmed.

"Since learning of the data breach, the Montana court team has worked tirelessly to identify whether any Montanan has been harmed by it," Swanson said. "We appreciate the rapid support of other state Supreme Courts and the National Center for State Courts. We will continue to work with the TR and C-Track teams to ensure our courts operate without fear of compromise of personal privacy."

According to the court’s announcement, all of the compromised data resided on Thomson Reuters’ systems, and the breach was not caused by any failure on the part of Montana or other affected state court systems.

A dedicated breach-notification site set up in connection with the incident states that the exposed court records could include individuals’ names along with, in some cases, Social Security numbers, driver’s license numbers, medical information, dates of birth and health insurance details. Some redacted, sealed or otherwise confidential records may also have been affected.

Montana court officials said they coordinated the timing of their public disclosure with Thomson Reuters and other affected states so that announcements could be issued together once the full scope of the incident was understood.

State court administration staff have received a copy of the accessed Montana data and are continuing to review it alongside Thomson Reuters’ security team to pinpoint which records contained private or confidential information. Officials said most of the accessed material appears to be information that is already publicly available, though the review did turn up some personally identifying details, including driver’s license numbers and dates of birth.

Montana residents who believe their personal information may have been included in the breach can seek more information at www.ctracknotification.com or by calling 1-833-918-5294 toll-free, Monday through Friday from 8 a.m. to 8 p.m. Central time, excluding major U.S. holidays. Those with a speech or hearing impairment can reach the line through TTY service at 711. Callers are asked to have engagement number B171847 available. Thomson Reuters is offering 12 months of free credit monitoring and identity theft protection to those affected.