Cybersecuritydive

SEC Drops Case Against SolarWinds Over 2020 Cyberattack

First seen 21 Nov 2025, 00:19 UTC • Cybersecuritydive

+3 •35.4

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

The SEC has dropped its civil fraud case against SolarWinds and its CISO, Tim Brown, related to the 2020 SUNBURST cyberattack. This decision ends a significant legal action that aimed to hold the company accountable for not disclosing security risks to investors prior to the attack, which involved Russian government hackers infiltrating numerous federal agencies and private firms.

How this analysis works

Attack Flow

18 entities, 31 inferred relationships (STIX 2.1).

Threat Actor (2)

Cozy Bear
Russian Foreign Intelligence Service

Technique (4)

Data Breach
Malware
Supply Chain Attack
Trojan

Campaign (1)

Sunburst Cyberattack

Organization (7)

Cisco
FireEye
Intel
Microsoft
National Nuclear Security Administration
SolarWinds
US SEC

Malware (1)

Sunburst

Affected Platform (3)

Orion
Orion Platform
SolarWinds Orion IT Management Software

Relationships

Cozy Bear uses Sunburst
Russian Foreign Intelligence Service uses Sunburst
Cozy Bear uses Data Breach
Cozy Bear uses Malware
Cozy Bear uses Supply Chain Attack
Cozy Bear uses Trojan
Russian Foreign Intelligence Service uses Data Breach
Russian Foreign Intelligence Service uses Malware
Russian Foreign Intelligence Service uses Supply Chain Attack
Russian Foreign Intelligence Service uses Trojan
Sunburst Cyberattack attributed to Cozy Bear
Sunburst Cyberattack attributed to Russian Foreign Intelligence Service
Sunburst Cyberattack uses Sunburst
Cozy Bear targets Cisco
Cozy Bear targets FireEye
Cozy Bear targets Intel
Cozy Bear targets Microsoft
Russian Foreign Intelligence Service targets Cisco
Russian Foreign Intelligence Service targets FireEye
Russian Foreign Intelligence Service targets Intel
Russian Foreign Intelligence Service targets Microsoft
Sunburst targets Cisco
Sunburst targets FireEye
Sunburst targets Intel
Sunburst targets Microsoft
Cozy Bear related to National Nuclear Security Administration
Cozy Bear related to SolarWinds
Cozy Bear related to US SEC
Cozy Bear related to Orion
Cozy Bear related to Orion Platform
Cozy Bear related to SolarWinds Orion IT Management Software

Continue Reading

APT28 Exploits Zimbra Vulnerability in Ongoing Attacks Against Ukraine Critical RCE Vulnerability in Zimbra Exploited by Attackers China-aligned APT Groups Target Global Maritime and Tech Sectors Amid Geopolitical Tensions Russian Cyber Espionage Clusters Exploit OAuth and Phishing Techniques Azerbaijan Establishes Cybersecurity Agency Amid Rising Russian and Iranian Threats CallPhantom Fraudulent Apps Scam Millions of Android Users

SEC Drops Case Against SolarWinds Over 2020 Cyberattack

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading