The U.S. Securities and Exchange Commission (SEC), which claimed that SolarWinds had deceived investors about the security procedures that resulted in the 2020 supply chain attack, has dropped its action against the business and its senior information security officer.
The SEC, SolarWinds, and its CISO Timothy G. Brown requested that the court voluntarily dismiss the lawsuit in a joint motion submitted on November 20, 2025. The SEC stated that the Commission’s stance on any other matter is not necessarily reflected in its decision to request dismissal.
In October 2023, the SEC accused SolarWinds and Brown of fraud and internal control violations, alleging that the business had misled investors by exaggerating its cybersecurity procedures and understating or neglecting to disclose known vulnerabilities.
Additionally, the agency claimed that Brown and SolarWinds disregarded “repeated red flags” and did notsufficiently safeguard its assets read more about SEC Drops SolarWinds Case After Years of High-Stakes Cybersecurity Scrutiny.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.