Something doesn't look right?

Solarwinds Data Breach Oct 2020

No known CVEs used

Subscribe for weekly updates

Security Incident Summary

Severity Score

High

Organization

Solarwinds

Threat Actor

APT29

aka

Actor Type

APT

Type of Breach

3rd Party Compromise

News Timeline

Oct 23, 2024

Additional Reports

Four firms charged, fined over handling of SolarWinds hack disclosures csoonline.com - The U.S. Securities and Exchange Commission (SEC) charged four companies—Avaya Holdings, Check Point Software, Mimecast, and Unisys—for issuing misleading disclosures about the impact of the 2020 Sola...
Show more

Jul 20, 2024

Judgement Issued

Federal judge greenlights securities fraud charges against SolarWinds and its CISO csoonline.com - A federal court judge ruled that while most charges against SolarWinds in the SEC lawsuit following the 2020 Sunburst cyberattack were dismissed, the securities fraud charges against the company and i...
Show more

Jul 19, 2024

Claims Dismissed

Federal Judge Dismisses Major Claims in SEC’s Lawsuit Against SolarWinds thecyberexpress.com - Newly disclosed in the ongoing legal proceedings, U.S. District Judge Paul Engelmayer has dismissed a significant portion of the SEC's lawsuit against SolarWinds, specifically ruling that the company’...
Show more

Jul 18, 2024

Lawsuit Dismissed

Judge mostly drags SEC's lawsuit against SolarWinds into the recycling bin go.theregister.com - A US federal district judge has dismissed the SEC's post-SUNBURST claims against SolarWinds and its Chief Information Security Officer, suggesting that allegations regarding reporting deficiencies rel...
Show more

Claims Dismissed

Sizable Chunk of SEC Charges Against SolarWinds Tossed Out of Court darkreading.com - A judge has dismissed legal claims against SolarWinds regarding actions taken after its systems were breached. The case will proceed focusing on alleged misstatements made by the company prior to the ...
Show more

Jul 08, 2024

Failure to Act

The President Ordered a Board to Probe a Massive Russian Cyberattack. It Never Did. propublica.org - New revelations highlight that the Cyber Safety Review Board never fulfilled its mandate to investigate the SolarWinds attack as directed by the President in May 2021. This failure resulted in a misse...
Show more

Dec 13, 2020

FireEye Report

Highly Evasive Attacker Leverages SolarWinds Supply Chain to Compromise Multiple Global Victims With SUNBURST Backdoor cloud.google.com - FireEye has discovered that the SUNBURST malware used in the SolarWinds Orion supply chain compromise employs a Domain Generation Algorithm (DGA) for command and control (C2) communications, which inc...
Show more

Organization Details

Organization Size

2305

HQ Location

Austin, TX

Industry

Information Technology

Security Stack used by Solarwinds at time of breach (best approximation) Why?

Network Security

VPN/SASE

IDS/IPS

Endpoint Security

EDR

MDM

Identity Management

SSO / MFA

IGA

Application Security

WAF

SCA

Cloud Security

CASB

CWPP

SIEM / Threat Intel

SIEM

TIP

Not right? Contribute more accurate data

Learn more about recent incidents

9 / 10

Okta Oct, 2023