“We allege that, for years, SolarWinds and Brown ignored repeated red flags about SolarWinds’ cyber risks, which were well known throughout the company and led one of Brown’s subordinates to conclude: ‘We’re so far from being a security minded company,’”
SolarWinds’ own 2018 slides said the “current state of security leaves us in a very vulnerable state for our critical assets.” Investors got broad, theoretical risk language instead. Then Russian hackers trojanized Orion and pushed it to fewer than 18,000 victims, including federal agencies. The CEO now calls the lawsuit a threat to information sharing. The information he failed to share was with his own shareholders.