Every public data breach

Disclosed this week47On record26,367

47 disclosed this week · 26,367 on record

Avaya

Disclosed Oct 22, 2024Unverified

SolarWinds-related intrusion minimized in disclosures; USD 1M SEC penalty

The SEC found Avaya negligently minimized the scope of the SolarWinds-linked intrusion it suffered in its investor disclosures, and imposed a USD 1M civil penalty.

What is known

People affectedNot stated in the sources we have
DisclosedOct 22, 2024
AttackSupply chain
Data exposedInternal documents
SectorTech · US
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Lawsuit or fineUSD 1M SEC civil penalty (Oct 2024) (about $1M)
Part ofSolarwinds (2020)

Sources

Newstechcrunch.com
SEC fines four companies $7M for misleading cyber disclosures regarding SolarWinds hack

Notices filed

TotalOct 22, 2024
ResearchCount not stated

Same campaign

UnisysSolarWinds-related intrusion understated in filings; USD 4M SEC penaltySupply chainTechUSUnverifiedOct 22, 2024MimecastSolarWinds-related intrusion minimized in disclosures; USD 990,000 SEC penaltySupply chainTechGBUnverifiedOct 22, 2024Check PointSolarWinds-related intrusion minimized in disclosures; USD 995,000 SEC penaltySupply chainTechILUnverifiedOct 22, 2024US Federal GovernmentLikely Russian APT compromised fewer than ten US agencies via SolarWinds OrionSupply chainGovernmentUSJan 5, 2021MicrosoftSolarWinds attackers view Microsoft source code repositoriesSupply chainTechUSDec 31, 2020SolarWindsBuild system compromise plants backdoor in Orion updates shipped to customersSupply chainTechUSDec 14, 2020FireEyeNation-state attacker steals FireEye red team assessment toolsSupply chainTechUSDec 8, 2020
History of this record
Added2026-09-25
First recordedby seedSource

First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.

Everything about Avaya