SEC Drops SolarWinds Case After Years of High-Stakes Cybersecurity Scrutiny
The U.S. Securities and Exchange Commission (SEC), which claimed that SolarWinds had deceived investors about the security procedures that resulted in the 2020 supply chain attack, has dropped its action against the business and its senior information security officer.
The SEC, SolarWinds, and its CISO Timothy G. Brown requested that the court voluntarily dismiss the lawsuit in a joint motion submitted on November 20, 2025. The SEC stated that the Commission's stance on any other matter is not necessarily reflected in its decision to request dismissal.
In October 2023, the SEC accused SolarWinds and Brown of fraud and internal control violations, alleging that the business had misled investors by exaggerating its cybersecurity procedures and understating or neglecting to disclose kn...