SEC Sues SolarWinds for Not Publicly Disclosing Alleged Cybersecurity Failures

The Securities and Exchange Commission sued software company SolarWinds for failing to publicly disclose alleged cybersecurity failures that led to one of history’s biggest computer breaches. In a complaint filed in the Southern District of New York, the SEC contends that SolarWinds and the company’s chief information security officer, Tim Brown, repeatedly violated the antifraud disclosure and internal controls provisions of federal securities law by not disclosing vulnerabilities that the company knew could lead to a hack.