Every public data breach

Disclosed this week44On record26,355

44 disclosed this week · 26,355 on record

Mimecast

Disclosed Oct 22, 2024Unverified

SolarWinds-related intrusion minimized in disclosures; USD 990,000 SEC penalty

The SEC found Mimecast negligently minimized the SolarWinds-linked intrusion in its disclosures, and imposed a USD 990,000 civil penalty.

What is known

People affectedNot stated in the sources we have
DisclosedOct 22, 2024
AttackSupply chain
Data exposedInternal documents
SectorTech · GB
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Lawsuit or fineUSD 990,000 SEC civil penalty (Oct 2024) (about $990K)
Part ofSolarwinds (2020)

Sources

Newstechcrunch.com
SEC fines four companies $7M for misleading cyber disclosures regarding SolarWinds hack

Notices filed

TotalOct 22, 2024
ResearchCount not stated

Same campaign

UnisysSolarWinds-related intrusion understated in filings; USD 4M SEC penaltySupply chainTechUSUnverifiedOct 22, 2024Check PointSolarWinds-related intrusion minimized in disclosures; USD 995,000 SEC penaltySupply chainTechILUnverifiedOct 22, 2024AvayaSolarWinds-related intrusion minimized in disclosures; USD 1M SEC penaltySupply chainTechUSUnverifiedOct 22, 2024US Federal GovernmentLikely Russian APT compromised fewer than ten US agencies via SolarWinds OrionSupply chainGovernmentUSJan 5, 2021MicrosoftSolarWinds attackers view Microsoft source code repositoriesSupply chainTechUSDec 31, 2020SolarWindsBuild system compromise plants backdoor in Orion updates shipped to customersSupply chainTechUSDec 14, 2020FireEyeNation-state attacker steals FireEye red team assessment toolsSupply chainTechUSDec 8, 2020
History of this record
Added2026-09-25
First recordedby seedSource

First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.

Everything about Mimecast