At For The Record, our highest priority is safeguarding sensitive court information. While no organization is immune to threats in today’s evolving court cybersecurity landscape, our responsibility is to respond to and address threats quickly, communicate appropriately, and mitigate risks to ensure the ongoing security of court content.
Recently, For The Record was indirectly impacted by a global software supply-chain attack targeting the widely used Nx build system package, which was compromised with data-stealing malware. The incident occurred between August 27–29, 2025. While it was not a targeted breach of For The Record, a brief exposure window resulted in the release of a small number of files from historical repositories, as well as information that was already publicly available.
Importantly, no customer data stored in FTR Justice Cloud was impacted, and all systems are operating as expected. Robust security controls, aligned with our NIST SP 800-53 Rev. 5 compliance, prevented any further impact to our systems or customers.
When we learned about the attack on Nx, we took immediate steps to contain and remediate the issue, including:
- Suspending platform releases and refreshing security controls
- Rotating all credentials, access keys, and tokens
- Conducting a full system-wide audit, which confirmed no unusual activity
- Engaging independent security experts to further validate our findings and defenses
What do you need to do?
You do not need to take any action. We have addressed the incident and reinforced protections across our systems.
If you have any questions, please reach out to your For The Record account manager, who will be happy to assist.
For further information on the incident, click here.
