Skip to content
Breaches.

SolarWinds

Disclosed Dec 14, 20205 years agoConfirmed

SEC filing

Build system compromise plants backdoor in Orion updates shipped to customers

SolarWinds disclosed that attackers compromised its Orion software build system and inserted a vulnerability into Orion updates released between March and June 2020; it notified about 33,000 Orion maintenance customers.

What is known

People affectedNot stated in the sources we have
DisclosedDec 14, 2020
DiscoveredDec 2020
AttackSupply chain
Data exposedSource code, Internal documents
SectorTech · US
StatusConfirmed
Part ofSolarwinds (2020)

Sources

Source
SolarWinds 8-K (December 14, 2020)sec.gov · SEC filing

Notices filed

WhereFiledPeople
ResearchtotalDec 14, 2020

Same campaign

OrganizationAffected
UnisysSolarWinds-related intrusion understated in filings; USD 4M SEC penaltyOct 22, 20241 year agoSupply chainUnverifiedUnknown
MimecastSolarWinds-related intrusion minimized in disclosures; USD 990,000 SEC penaltyOct 22, 20241 year agoSupply chainUnverifiedUnknown
Check PointSolarWinds-related intrusion minimized in disclosures; USD 995,000 SEC penaltyOct 22, 20241 year agoSupply chainUnverifiedUnknown
AvayaSolarWinds-related intrusion minimized in disclosures; USD 1M SEC penaltyOct 22, 20241 year agoSupply chainUnverifiedUnknown
US Federal GovernmentLikely Russian APT compromised fewer than ten US agencies via SolarWinds OrionJan 5, 20215 years agoSupply chainUnknown
MicrosoftSolarWinds attackers view Microsoft source code repositoriesDec 31, 20205 years agoSupply chainUnknown
FireEyeNation-state attacker steals FireEye red team assessment toolsDec 8, 20205 years agoSupply chainUnknown
History of this record
  • 2026-09-25 · added · seed source

First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.

Everything about SolarWinds

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.