Public Statement by Ontario's three Chief Justices Regarding a Cybersecurity Incident Related to the Ontario Courts

We would like to make the public aware of a cybersecurity incident involving Thomson Reuters Canada Limited's C–Track case management platform. C–Track is used by the Court of Appeal for Ontario, the Ontario Superior Court of Justice, and the Ontario Court of Justice to store and manage some court documents and records.

Overview of the Incident

On June 30, 2026, Thomson Reuters detected unauthorized activity within one of its cloud environments. We are advised that Thomson Reuters responded by taking steps to contain the activity, engaging external cybersecurity experts to advise and investigate, notifying law enforcement, and securing the C-Track environment. During the investigation, Thomson Reuters determined that the accessed data included some information from the Ontario courts and advised Ontario's Ministry of the Attorney General of this on July 23, 2026. Upon becoming aware of the incident, the Ministry of the Attorney General, in collaboration with the Ontario Court of Justice, the Superior Court of Justice, and the Court of Appeal for Ontario, immediately began consultation with Thomson Reuters Canada and the Ontario government's cybersecurity experts to understand the nature and scope of the incident and to assess any potential implications for court users.

Thomson Reuters Canada advises that it continues to investigate the full extent of the incident, including the specific content and types of information involved at each affected court and the number of individuals whose information may have been affected. Because there remains uncertainty about the exact content of the files that may have been accessed, it is still unclear what information may have been compromised. However, if individuals have been involved in court proceedings or may have been mentioned in court documents, it is possible that some personal information relating to them could have been involved in the incident. The Ministry and the courts continue to work closely with Thomson Reuters Canada and cybersecurity specialists to assess the impact of the incident and appropriate response measures.

Current Status

Thomson Reuters Canada advises that there is no evidence to date that the incident has resulted in any identity theft and has advised the courts that it has implemented mitigation measures designed to reduce the risk of misuse. There is also currently no indication that any systems used to process financial transactions relating to court proceedings were affected by the incident.

Thomson Reuters Canada has advised, as noted above, that additional safeguards and security enhancements have been implemented to further strengthen the protection of its systems and data. We are assured that C–Track remains operational and safe to use.

In addition, the three Ontario courts are working closely with the Ontario government's specialist Cyber Security Division to review and assess the measures that are being taken to respond to this breach and the ongoing security and safety of C–Track. We will continue to monitor the situation closely.

Public Website and Telephone Information Line

We recognize that individuals, and particularly those whose information may have been mentioned in Ontario court records, may be concerned about the potential misuse of their information.

Thomson Reuters will be receiving and responding to any inquiries. To support potentially affected individuals and ensure that accurate, up-to-date information is readily available, Thomson Reuters Canada has established a dedicated information website and will be setting up a toll-free Canadian call centre staffed by trained representatives located in Canada. The website will be updated to contain contact information for the call centre, which is scheduled to become active on September 4, 2026.

Our Commitment to Privacy and Transparency

Protecting the privacy and security of the information entrusted to us is a responsibility as Chief Justices we take very seriously. We remain committed to transparency. Throughout this process, our priority is to ensure support for potentially affected individuals, safeguard information entrusted to the courts, and work collaboratively with the Government of Ontario to strengthen security measures and reduce the risk of similar incidents in the future. We want to assure the public that this incident has in no way affected the ability of the courts to operate, and the judiciary continues to fulfill its responsibility to the public to hear and decide cases.

The Honourable Michael H. Tulloch, Chief Justice of Ontario
The Honourable Patrick J. Boucher, Chief Justice, Ontario Superior Court of Justice
The Honourable Sharon M. Nicklas, Chief Justice, Ontario Court of Justice