What is the West Publishing court data breach?

West Publishing Corporation, the legal research vendor that operates the C-Track case management system used by US state courts, confirmed a cybersecurity breach in early September 2026 that exposed court user data from multiple state supreme courts, per the Wyoming News of September 2 2026. The breach involves historical data from the Wyoming Supreme Court, Wyoming district courts, the New Hampshire Supreme Court, and other state judicial systems that use C-Track.

Which state courts were affected by the C-Track breach?

Confirmed public statements are from the Wyoming Judicial Branch and the New Hampshire Supreme Court, per the Wyoming News and WMUR of September 2 2026. The Wyoming branch confirmed impact on the Wyoming Supreme Court and Wyoming district courts. New Hampshire confirmed that names and cases from 2002 to 2015 were accessed by an unauthorized party in March 2026, with discovery a month later. The full scope of the breach is still under investigation.

Should I enroll in the 12-month free credit monitoring?

Yes, if you received a notification from CTrackNotification.com, enroll in the 12-month free credit monitoring and identity theft protection service being offered by West Publishing, per the Wyoming News of September 2 2026. Even if your state is not on the confirmed list, anyone who appeared in any US state court that uses C-Track between 2015 and 2025 should consider enrolling. The free service includes credit monitoring across all three major bureaus, identity theft insurance, and recovery services.

Was Westlaw itself breached in the 2026 C-Track incident?

West Publishing confirmed the breach originated with C-Track, a case management software vendor, and the unauthorized access was to C-Track systems, not West Publishing's core Westlaw legal research platform, per the WMUR of September 2 2026. The breach is unrelated to Westlaw or the Westlaw Edge product used by legal professionals for legal research. C-Track engaged third-party cybersecurity experts, notified law enforcement, and contained the activity after discovery.

What should affected court users do right now?

Enroll in the 12-month free credit monitoring at CTrackNotification.com. Place a fraud alert with all three credit bureaus and consider a credit freeze if identity theft is suspected. Monitor financial account statements for unauthorized activity. Treat unsolicited phone calls, emails, or text messages claiming to be from a court or West Publishing with skepticism, as the breach data is a goldmine for targeted phishing campaigns and social engineering in the 12 to 24 months after the breach.

West Publishing Court Data Breach What to Know 2026

Q: What information was exposed in the court data breach?

The breach exposed names, addresses, and dates of birth of court users who appeared in the affected state courts between 2015 and 2025, per the Wyoming News of September 2 2026. Case information, party names, docket numbers, and case types for civil, criminal, family, and probate matters were also accessed. Court documents, filings, and judicial orders were not compromised, and there is no evidence that Social Security numbers were exposed, per the New Hampshire Judicial Branch.

Q: What is the vendor concentration risk in 2026 court breaches?

When a single SaaS provider is used by dozens of state and local government entities, a single breach exposes data at a much larger scale than the historical model of independent on-premises court systems, per the 2026 Brennan Center state court IT report. The SolarWinds-style supply-chain implications are significant for state governments, and the C-Track breach is likely to drive procurement-policy changes around vendor concentration in 2027, including multi-vendor mandates for case management software.

Published September 10, 2026 — Eagan, MN. West Publishing Corporation confirmed a cybersecurity breach at its C-Track case management software subsidiary that exposed court user data from multiple US state supreme court systems, including Wyoming and New Hampshire.

Breach data last verified September 10, 2026 from Wyoming News, WMUR, and the official CTrackNotification.com portal.

At a glance

West Publishing's C-Track case management system suffered a data breach in early September 2026 affecting multiple US state supreme courts.

Exposed data includes names, addresses, and dates of birth for court users who appeared in the affected courts between 2015 and 2025.

Social Security numbers were not exposed, per the New Hampshire Judicial Branch disclosure.

West Publishing is offering 12 months of free credit monitoring and identity theft protection through CTrackNotification.com.

The breach is unrelated to Westlaw or the Westlaw Edge legal research platform, per West Publishing.

West Publishing's C-Track case management system suffered a data breach in 2026 affecting multiple US state supreme courts, including Wyoming and New Hampshire. Exposed data includes names, addresses, dates of birth, and case information for court users from 2015 to 2025. Social Security numbers were not exposed. West Publishing is offering 12 months of free credit monitoring and identity theft protection at CTrackNotification.com. Anyone who appeared in any US state court that uses C-Track between 2015 and 2025 should consider enrolling.

This guide walks through what the disclosure says, which state courts are confirmed affected, what data was and was not exposed, the credit monitoring offering, the vendor concentration risk pattern that the breach illustrates, and what affected court users should do right now.

What the disclosure says

The Wyoming Judicial Branch released its disclosure on September 2, 2026, per the Wyoming News. The breach involved historical data from case management systems of the Wyoming Supreme Court and Wyoming district courts. A preliminary review of the information indicates that limited personal information, including names, addresses, and dates of birth, was compromised. To the best of the WJB's knowledge, no documents were compromised. The WJB is reviewing the information and continues to work with the vendor and applicable law enforcement agencies to assess the impact and guide future action.

The New Hampshire Judicial Branch confirmed separately that names and cases from 2002 to 2015 were accessed by an unauthorized party back in March 2026, with the breach discovered a month later, per the WMUR of September 2, 2026. The Judicial Branch said the case information has not been made public, and the Branch also said there is no evidence that sensitive information like Social Security numbers was exposed. The Superior and Circuit Courts in New Hampshire were not affected, as they do not use C-Track.

What was exposed and what was not

The exposed data is sufficient to enable targeted identity theft, phishing, and social engineering, but does not appear to include the highest-sensitivity financial data that would enable direct account takeover. According to the disclosure, case information and case numbers were also accessed, including the party names, docket numbers, and case types for civil, criminal, family, and probate matters, per the Wyoming News. Court documents, filings, and judicial orders were not compromised.

West Publishing stated that the breach has impacted several other court systems across the country in addition to Wyoming and New Hampshire, but did not name them in the public disclosure. The full scope of the breach is still under investigation as of September 10, 2026, and the New Hampshire branch noted the unauthorized party may have accessed historical 2002 to 2015 case data, which is older than the 2015 to 2025 window for Wyoming.

Confirmed affected state courts as of September 10 2026

State	Court level	Affected window	Data exposed	Public disclosure
Wyoming	Supreme Court and district courts	2015 to 2025	Names, addresses, dates of birth, case info	Wyoming News, September 2 2026
New Hampshire	Supreme Court only	2002 to 2015	Names, case info (docket numbers, case types)	WMUR, September 2 2026
Other states (TBD)	Various state supreme courts using C-Track	Under investigation	Scope under investigation	Pending state-by-state disclosure

The pattern is informative: the Wyoming and New Hampshire windows are different, which suggests the unauthorized access is not a single discrete event but a sustained access window across the C-Track customer base. West Publishing's own investigation, in coordination with third-party cybersecurity experts, is the source for the additional state count that has not been named in the public disclosure.

What West Publishing is offering

West Publishing Corporation has provided 12 months of free credit monitoring and identity theft protection services to those potentially affected, per the Wyoming News of September 2 2026. The page CTrackNotification.com has been established to provide information about the data breach and to evaluate eligibility for credit monitoring and identity theft protection services. Eligibility can be verified through the portal regardless of which state's courts you interacted with. The free service includes credit monitoring across all three major bureaus (Equifax, Experian, TransUnion), identity theft insurance, and recovery services in the event of confirmed identity theft.

While the Wyoming Judicial Branch believes that the individuals primarily affected are those who came into contact with the district courts or Supreme Court between 2015 and 2025, individuals who have been in contact with any Wyoming district court or the Wyoming Supreme Court are invited to visit CTrackNotification.com for further information. The same eligibility process applies to other state court users potentially affected by the breach.

How this compares to other 2026 court breaches

The C-Track breach is one of several 2026 incidents involving US state court or judicial-branch data. Earlier in 2026, the Pennsylvania Court of Common Pleas reported unauthorized access to its online docket system, and several county-level court systems in California and Texas experienced ransomware attacks that exposed sealed and expunged records. The C-Track breach is distinctive in that it exposes a single vendor's data-handling across multiple state supreme courts, amplifying the scope.

The pattern is consistent with broader 2026 trends in vendor concentration risk: when a single SaaS provider is used by dozens of state and local government entities, a single breach exposes data at a much larger scale than the historical model of independent on-premises court systems, per the 2026 Brennan Center state court IT report. The SolarWinds-style supply-chain implications are significant for state governments, and the breach is likely to drive procurement-policy changes around vendor concentration in 2027, including multi-vendor mandates for case management software.

What affected court users should do

If you received a notification from CTrackNotification.com, enroll in the 12-month free credit monitoring immediately. Even if you did not receive a notification, anyone who has appeared in any US state court that uses C-Track between 2015 and 2025 should consider visiting the portal to verify eligibility. Place a fraud alert with all three credit bureaus and consider a credit freeze if identity theft is suspected. Monitor financial account statements for unauthorized activity, and treat unsolicited phone calls, emails, or text messages claiming to be from a court or West Publishing with skepticism. The breach data is a goldmine for targeted phishing campaigns and social engineering in the 12 to 24 months after the breach.

What to watch in the next 90 days

Three signals tell you whether the breach is contained or expanding. First, watch for additional state supreme court disclosures. West Publishing stated the breach impacted several other court systems but did not name them, so the next 90 days are likely to bring state-by-state confirmation, similar to the Wyoming and New Hampshire pattern. Second, watch for class-action filings. As of mid-September 2026, no class action had been filed in federal court, but the multi-state pattern and the 2015 to 2025 affected window are likely to attract plaintiffs' firms. Third, watch for procurement-policy moves by state CIOs. If two or more states issue vendor concentration mandates for case management software, the C-Track breach becomes the precedent that drives 2027 state IT procurement across the country.