SEC Dismisses SolarWinds Case After Allegations of Misleading Investors
Summary
Hide ▲
Show ▼
The U.S. Securities and Exchange Commission (SEC) has dropped its lawsuit against SolarWinds and its former chief information security officer (CISO) Timothy G. Brown. The case, filed in October 2023, alleged that SolarWinds misled investors about its cybersecurity practices, which led to the 2020 supply chain attack attributed to Russian state-sponsored threat actor APT29. The SEC's decision to dismiss the case follows a July 2024 ruling by the U.S. District Court for the Southern District of New York (SDNY), which dismissed many of the SEC's allegations as speculative and relying on hindsight. SolarWinds CEO Sudhakar Ramakrishna stated that the company emerges stronger and more secure from this legal challenge.
Timeline
-
21.11.2025 10:05 1 articles · 23h ago
SEC Dismisses SolarWinds Case After Court Ruling
The SEC has dropped its lawsuit against SolarWinds and its CISO Timothy G. Brown, following a court ruling that dismissed many of the allegations as speculative. The case, which began in October 2023, alleged that SolarWinds misled investors about its cybersecurity practices, leading to the 2020 supply chain attack attributed to APT29. The dismissal marks the end of a legal challenge that has spanned over two years.
Show sources
- SEC Drops SolarWinds Case After Years of High-Stakes Cybersecurity Scrutiny — thehackernews.com — 21.11.2025 10:05
Information Snippets
-
The SEC filed a lawsuit in October 2023 against SolarWinds and its CISO Timothy G. Brown, alleging fraud and internal control failures related to the 2020 supply chain attack.
First reported: 21.11.2025 10:051 source, 1 articleShow sources
- SEC Drops SolarWinds Case After Years of High-Stakes Cybersecurity Scrutiny — thehackernews.com — 21.11.2025 10:05
-
The SEC claimed SolarWinds misled investors by overstating its cybersecurity practices and understating known risks.
First reported: 21.11.2025 10:051 source, 1 articleShow sources
- SEC Drops SolarWinds Case After Years of High-Stakes Cybersecurity Scrutiny — thehackernews.com — 21.11.2025 10:05
-
The U.S. District Court for the Southern District of New York (SDNY) dismissed many of the SEC's allegations in July 2024, stating they relied on hindsight and speculation.
First reported: 21.11.2025 10:051 source, 1 articleShow sources
- SEC Drops SolarWinds Case After Years of High-Stakes Cybersecurity Scrutiny — thehackernews.com — 21.11.2025 10:05
-
The SEC also charged Avaya, Check Point, Mimecast, and Unisys for making misleading disclosures related to the SolarWinds hack.
First reported: 21.11.2025 10:051 source, 1 articleShow sources
- SEC Drops SolarWinds Case After Years of High-Stakes Cybersecurity Scrutiny — thehackernews.com — 21.11.2025 10:05