Aerial view of the Alexander A. Farrelly Justice Center on St. Thomas, home to the Superior Court, whose files were among those obtained in the C-Track cybersecurity breach.
An unauthorized party obtained files associated with the Supreme and Superior Courts of the U.S. Virgin Islands during a cybersecurity incident involving C-Track, the court-management system used by the territorial judiciary, according to newly released disclosures from the vendor and the Judicial Branch of the Virgin Islands.
The Judiciary publicly disclosed the incident on Wednesday, saying C-Track — owned by West Publishing Corporation — is the enterprise case-management system used by both territorial courts. The system supports electronic filing and public access to case information through the Judiciary's online portal. Administrator of Courts Regina Petersen said that while court data was affected, the intrusion did not originate from the Judiciary's own networks or systems.
C-Track's own disclosure provides considerably more detail about what occurred. The company said it discovered unauthorized third-party activity involving certain C-Track information on June 30 and launched an investigation involving outside cybersecurity experts and law enforcement. That investigation determined that an unauthorized party had obtained certain C-Track files in March 2026, months before the activity was discovered.
The company specifically identifies the U.S. Virgin Islands Supreme and Superior Courts among the affected judicial systems. Numerous mainland courts were also affected, including appellate or other judicial systems in Alabama, Kentucky, Montana, Nevada, North Dakota, South Carolina, Tennessee, New Hampshire, Ohio, Pennsylvania and Wyoming.
The potential contents of the compromised files make the incident particularly significant. C-Track said its investigation determined that a subset of court records was affected and that some records could potentially contain names as well as Social Security numbers, driver's license numbers, medical information, dates of birth and health-insurance information.
C-Track further disclosed that confidential, redacted or sealed information may have been impacted for certain affected courts. The company has not publicly specified whether those particularly sensitive categories were contained in the files obtained from the Virgin Islands courts, and the V.I. Judiciary has not said how many local records or individuals were affected.
That distinction is important: C-Track has confirmed that files associated with the V.I. Supreme and Superior Courts were obtained, but neither the vendor nor the Judiciary has yet identified precisely what information was contained in the affected V.I. files.
“The full scope of the incident has not yet been determined,” the Judiciary said Wednesday, directing members of the V.I. Bar and the general public to C-Track's dedicated incident website for additional information.
The company said there is currently no evidence that the compromised information has resulted in fraud or misuse. It also said there is no evidence that systems used to process financial transactions were affected. C-Track maintains that the breach did not result from the networks, systems or data security of the individual courts whose information was involved.
C-Track is a Thomson Reuters court-management product designed to handle functions including case information, docketing, filings, documents and other judicial records. Thomson Reuters describes the system as being used by courts to manage information across court operations and case types.
For individuals concerned that their information may have been affected, C-Track is offering 12 months of complimentary Experian IdentityWorks credit monitoring and identity-restoration services. Enrollment is available through Dec. 31, 2026. The company has also established a toll-free information line at 1-833-918-5294, available Monday through Friday from 8 a.m. to 8 p.m. Central Time, excluding major U.S. holidays.
Several major questions concerning the Virgin Islands component of the incident remain unanswered, including how many local records were taken, how many people may be affected, the years covered by those records, which case categories were involved, and whether any confidential, redacted or sealed V.I. court material was among the files obtained.
The Judiciary said the incident remains under review.
Advertisements
