ZeroHour

Search: “court”

5,057 stories

Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data

Unauthorized access to Thomson Reuters' C-Track court platform may have exposed SSNs and sealed records across 11 US states, USVI, and Ontario.

Thomson Reuters' West Publishing disclosed that an unauthorized party obtained files from the C-Track court case management platform starting in March 2026, with access to one environment running from March 1 through June 29, 2026 per Montana's account. Notices name roughly 24 court bodies across 11 US states, the US Virgin Islands, and Ontario, including appellate courts in Minnesota, Ohio, Montana, and Pennsylvania. Exposed data may include names, Social Security numbers, driver's license numbers, dates of birth, medical and health insurance information, and confidential or sealed court records. The company is offering 12 months of Experian or TransUnion monitoring, and courts disagree over whether the vendor's backup cloud environment or the production platform was accessed.

The Hacker News · 12d agoData breach in the wild

Thomson Reuters reveals breach that exposed U.S. and Canadian court records

Thomson Reuters disclosed a C-Track breach exposing court records and personal data across at least 12 US states, US Virgin Islands, and Canada.

Thomson Reuters discovered unauthorized activity in its C-Track court case management platform on June 30, 2026, tracing the intrusion to March 2026. Affected systems include Ontario's three courts, Wyoming's entire state judiciary, and appellate and supreme courts across at least 12 US states plus the US Virgin Islands. Exposed records may include names, Social Security numbers, driver's license numbers, medical information, dates of birth, and health insurance details, with some sealed court information possibly affected. The company is offering 12 months of free credit monitoring and reports no evidence of fraud so far; attribution and access method remain unknown.

Help Net Security · 12d agoData breach

US and Canadian Court Records Breached Following Thomson Reuters Incident

Thomson Reuters disclosed a breach of its C-Track court software exposing sensitive case records across Ontario courts and 11 US states.

Thomson Reuters detected unauthorized access to its C-Track case management product on June 30 and disclosed the incident on September 2. Files from three Ontario courts and appellate courts in 11 US states plus the US Virgin Islands were affected, potentially exposing names, Social Security numbers, driver's license numbers, medical information, dates of birth and health insurance data. The company said financial transaction systems were not impacted and found no evidence of misuse; the investigation into exact scope is ongoing.

Infosecurity Magazine · 12d agoData breach 2 sources

ChatGPT-using lawyer punished for citing fake testimony from made-up witnesses

New Mexico Supreme Court holds lawyer in contempt for filing a ChatGPT-generated brief citing fabricated witness testimony; fined $5,000 and referred to disciplinary board.

The New Mexico Supreme Court held criminal defense lawyer Stephen Aarons in direct contempt for filing a murder-appeal brief containing false testimony from wholly fabricated witnesses, including Officer Michelle Amarillo and Officer Sanchez, plus misrepresented legal authority. Aarons admitted feeding a computer-generated trial transcript into ChatGPT, powered by the OpenAI o3 model, and filing the output without verifying factual claims or telling his client. He was fined $5,000, referred to a disciplinary board, and barred from appearing before the court pending proceedings; the court struck all briefs and ordered new counsel for client Oscar Renee Sandoval.

Ars Technica · AIupdated · 4d agofirst · 4d agoAI safety & security 2 sources

Finland appeals court revives case against Eagle S Officers over cable breaks

Finnish appeals court ruled Finland can prosecute Eagle S officers for 2024 Baltic Sea cable breaks, reviving the case and EUR 105M damages claims.

The Helsinki Court of Appeal ruled Finland has jurisdiction to prosecute three senior officers of the Eagle S, the Russia-linked tanker that severed multiple subsea cables on December 25, 2024, overturning a district court dismissal. The court found the crew's conduct after Finnish authorities made contact was not a 'maritime accident' under the UN Convention on the Law of the Sea, noting the ship dragged its anchor roughly 90 kilometers and cut four more cables. Owners of the Estlink 2 power cable, Fingrid and Elering, are seeking about EUR 105 million ($122 million), and the ruling will guide the related Fitburg anchor-dragging case. The decision can be appealed to Finland's Supreme Court until October 26, 2026.

The Record · 19d agoPolicy & legal

Person Hides Prompt Injection in Legal Filing Telling AI to Side With Them

A Connecticut pro se litigant hid tiny white-font prompt injections in court filings directing AI to favor him; the judge caught it and sanctioned him.

Pro se plaintiff Matthew Elliott hid prompt injection instructions in 3-point white text within filings in his lawsuit against the New York Bariatric Group, instructing any AI model reviewing the document to produce output agreeing with the filing. The hidden text also included joke messages such as a SpongeBob Nosferatu link and notes like 'hi :) I hope you cant see me'. Court staff noticed unusual white space, and Judge Walter Spader Jr. issued a 14-page sanction decision noting the Connecticut court does not use AI to process documents but warning that hidden AI-directed messages threaten the integrity of filings. Elliott described the scheme as an 'audit' of court AI usage, and the judge cited a prior prompt injection incident in a Brazilian court as evidence the practice may spread.

404 Media · Aug 13, 2026AI safety & security in the wild