On July 24, 2026, The Supreme Court of Ohio (the “Court”) was notified by vendor West Publishing Corporation, a wholly owned subsidiary of Thomson Reuters Corporation and doing business as Thomson Reuters Court Management Solutions (collectively, “TRCMS”), of a cybersecurity incident that occurred involving the “C-Track” system (“Incident”). C-Track is an appellate case management system that is hosted by the Supreme Court of Ohio and managed by TRCMS. The C-Track is used by 10 of Ohio’s 12 Courts of Appeals to upload their filings and related documents. The incident reported by TRCMS took place in March 2026.  

On July 28, 2026, the Court notified the 10 relevant courts of appeals of the incident.

This announcement today by the Court is intended to provide substitute notice as required under Ohio Revised Code Section 1347.12. As the investigation develops, the Court will make further announcements.

Also today, TRCMS has provided the following public statement on the incident:

At this point, the Court has confirmed the following:

• 10 of the 12 Courts of Appeals utilize C-Track for case management operations.
• The 8th district court of appeals (Cuyahoga County) and the 10th district court of appeals (Franklin County) do not use the C-Track system. That is, any and all data in the Cuyahoga County and Franklin County districts is unaffected.
• The cybersecurity Incident has affected other states that utilize C-Track for similar services.
• On August 31, 2026, TRCMS informed the Court that the unauthorized access took place on the Court’s production platform.  This platform hosts all of the filing system data of the 10 Courts of the Appeals noted above.

The Court has not yet determined:

• The extent to which personal information was exposed during the Incident, nor the specific identities of those individuals affected.
• The Court has been advised by TRCMS that enhanced and updated security measures have been deployed, but the Court has not yet received comprehensive details about such measures.

The next steps in the ongoing investigation and remediation process regarding the Incident include:

• The Court’s ongoing communication with TRCMS to ascertain what nonpublic personal information was involved in the Incident.
• Once the Court can determine what non-public personal information was disclosed and the identity and contact information of affected individuals, the Court will assess additional notice opportunities.
• The Court’s publication of additional future announcements on its website, as new developments warrant supremecourt.ohio.gov/DataInformation.

For questions about the incident or credit monitoring services
If you have questions regarding the incident, and/or if you would like to inquire about the credit monitoring services offered by TRCMS, please contact:

• Toll-free Call Center:
  1.833.918.5294 (Please be prepared to provide engagement number B171847)
• Incident Website:
  https://www.ctracknotification.com

In the event that you are not receiving a response at the number provided, please contact the Court at: 614.387.9558.

PDF files may be viewed, printed, and searched using the free Acrobat^® Reader
Acrobat Reader is a trademark of Adobe Systems Incorporated.