SEC charges tech companies for downplaying SolarWinds breaches

The SEC charged four companies (Unisys, Avaya, Check Point, and Mimecast) for allegedly providing materially misleading public disclosures about intrusions and data exfiltration stemming from the 2020 SolarWinds Orion supply‑chain compromise attributed to APT29; the report notes Sunburst backdoor deployment, access to sensitive files across multiple government and private organizations, and the civil penalties imposed on the firms.