North Dakota Supreme Court Data Breach Linked to Third-Party Vendor C-Track
A criminal investigation is underway after the North Dakota Supreme Court confirmed a data breach involving C-Track, a third-party vendor used by the court system. The breach, disclosed in late July, may have exposed sensitive information tied to the state’s highest court.
C-Track, a case management software provider, notified the North Dakota Court System of the incident, which also affected dozens of other court systems across the U.S. The full scope of the breach including the type of data compromised and the number of individuals impacted remains unclear.
Officials confirmed that the breach did not affect district court data, the Odyssey system, or nCourt, the platform handling financial transactions. While no evidence suggests direct exploitation of the exposed data, users of the North Dakota Court website were advised to monitor accounts and credit reports for suspicious activity.
The investigation is ongoing, with authorities working to determine the extent of the compromise and potential fallout.
Source: https://www.kfyrtv.com/2026/09/03/north-dakota-supreme-court-impacted-by-third-party-data-breach/
C-Track Geosciences and Geoinformatics cybersecurity rating report: https://www.rankiteo.com/company/c-track-surveys
"id": "C-T1788405973",
"linkid": "c-track-surveys",
"type": "Breach",
"date": "7/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'industry': 'Legal/Judicial',
'location': 'North Dakota, USA',
'name': 'North Dakota Supreme Court',
'type': 'Government (Judicial)'},
{'customers_affected': 'Dozens of other court systems '
'across the U.S.',
'industry': 'Software/Case Management',
'name': 'C-Track',
'type': 'Third-Party Vendor'}],
'attack_vector': 'Third-Party Vendor Compromise',
'customer_advisories': 'Monitor accounts and credit reports for suspicious '
'activity',
'data_breach': {'sensitivity_of_data': 'High (tied to the state’s highest '
'court)',
'type_of_data_compromised': 'Sensitive information'},
'date_publicly_disclosed': '2023-07',
'description': 'A criminal investigation is underway after the North Dakota '
'Supreme Court confirmed a data breach involving C-Track, a '
'third-party vendor used by the court system. The breach, '
'disclosed in late July, may have exposed sensitive '
'information tied to the state’s highest court. C-Track, a '
'case management software provider, notified the North Dakota '
'Court System of the incident, which also affected dozens of '
'other court systems across the U.S. The full scope of the '
'breach including the type of data compromised and the number '
'of individuals impacted remains unclear. Officials confirmed '
'that the breach did not affect district court data, the '
'Odyssey system, or nCourt, the platform handling financial '
'transactions. While no evidence suggests direct exploitation '
'of the exposed data, users of the North Dakota Court website '
'were advised to monitor accounts and credit reports for '
'suspicious activity.',
'impact': {'data_compromised': 'Sensitive information',
'identity_theft_risk': 'Monitor accounts and credit reports for '
'suspicious activity',
'systems_affected': 'C-Track case management software'},
'investigation_status': 'Ongoing',
'references': [{'source': 'North Dakota Supreme Court Disclosure'}],
'response': {'communication_strategy': 'Advisories to monitor accounts and '
'credit reports',
'law_enforcement_notified': 'Yes (Criminal investigation '
'underway)'},
'title': 'North Dakota Supreme Court Data Breach Linked to Third-Party Vendor '
'C-Track',
'type': 'Data Breach'}