Every public data breach

Disclosed this week44On record26,355

44 disclosed this week · 26,355 on record

SolarWinds

Disclosed Dec 14, 2020Confirmed

SEC filing

Build system compromise plants backdoor in Orion updates shipped to customers

SolarWinds disclosed that attackers compromised its Orion software build system and inserted a vulnerability into Orion updates released between March and June 2020; it notified about 33,000 Orion maintenance customers.

What is known

People affectedNot stated in the sources we have
DisclosedDec 14, 2020
DiscoveredDec 2020
AttackSupply chain
Data exposedSource codeInternal documents
SectorTech · US
StatusConfirmed
Part ofSolarwinds (2020)

Sources

SEC filingsec.gov
SolarWinds 8-K (December 14, 2020)

Notices filed

TotalDec 14, 2020
ResearchCount not stated

Same campaign

UnisysSolarWinds-related intrusion understated in filings; USD 4M SEC penaltySupply chainTechUSUnverifiedOct 22, 2024MimecastSolarWinds-related intrusion minimized in disclosures; USD 990,000 SEC penaltySupply chainTechGBUnverifiedOct 22, 2024Check PointSolarWinds-related intrusion minimized in disclosures; USD 995,000 SEC penaltySupply chainTechILUnverifiedOct 22, 2024AvayaSolarWinds-related intrusion minimized in disclosures; USD 1M SEC penaltySupply chainTechUSUnverifiedOct 22, 2024US Federal GovernmentLikely Russian APT compromised fewer than ten US agencies via SolarWinds OrionSupply chainGovernmentUSJan 5, 2021MicrosoftSolarWinds attackers view Microsoft source code repositoriesSupply chainTechUSDec 31, 2020FireEyeNation-state attacker steals FireEye red team assessment toolsSupply chainTechUSDec 8, 2020
History of this record
Added2026-09-25
First recordedby seedSource

First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.

Everything about SolarWinds