SEC to drop high-profile SolarWinds hack lawsuit

The SEC has moved to dismiss its lawsuit against SolarWinds and CISO Tim Brown, which alleged fraudulent investor disclosures about cybersecurity weaknesses preceding the 2020 Sunburst compromise. A July 2024 ruling had already dismissed most claims, allowing only limited pre-Sunburst allegations tied to a Security Statement to proceed. The report situates the decision within the broader impact of the SolarWinds breach on U.S. policy, including the 2021 cybersecurity executive order and the subsequent creation—then disbanding—of the Cyber Safety Review Board.