The Oregon Judicial Department (OJD) has taken action after learning that some data from the case management system used by Oregon’s appellate courts was involved in a vendor security breach.
West Publishing Corporation, doing business as Thomson Reuters, is a private vendor that provides the case management system for Oregon’s Court of Appeals and Supreme Court. This cloud-hosted system is called “C-Track.”
Thomson Reuters notified OJD that hackers had breached Thomson Reuters’ C-Track system, impacting appellate courts in Oregon and at least 11 other states. None of Oregon’s systems, including circuit courts or the Tax Court, were involved. The daily operations of Oregon’s courts throughout the state were also not impacted.
Since learning of the incident, OJD has done an extensive cyber analysis and taken proactive steps to ensure the continued security of all OJD systems and networks. OJD has been demanding answers and accountability from Thomson Reuters as it works to determine the full scope of the breach and its impact on Oregonians. Exactly which data may have been involved is unclear at this time, but OJD leadership expects to receive more details from Thomson Reuters in the coming weeks.
“As the Judicial Branch, our primary concern is the people who appear before our courts, and the security of their information when interacting with these systems. That’s why we take all measures available to ensure that security,” said Chief Justice Meagan Flynn. “For a vendor to allow a security breach of this nature to occur is unacceptable. The Oregon Judicial Department is publicly sharing what information we do have in the interest of transparency and out of an abundance of caution, and we will continue to share information as we get it from our vendor.”
If OJD learns that any personal or confidential information was exposed, we will work to notify each impacted individual of the breach and share information about available options, including free credit monitoring.
Questions should be directed to the Thomson Reuters hotline at 1-833-918-5294. Be prepared to provide engagement number B171847. More information can also be found on the incident website.
The investigation is ongoing. OJD will provide updates as more information becomes available.
