SEC v. SolarWinds Corp. & Timothy G. Brown (Chief Information Security Officer)

Unprecedented SEC enforcement action charging a public software enterprise and its individual CISO with defrauding investors through misleading public cybersecurity statements prior to the historic SUNBURST supply chain breach.

The SEC alleged that SolarWinds and its CISO knowingly downplayed cybersecurity deficiencies in public filings while internal communications revealed acute security vulnerabilities. The case fundamentally transformed public corporate cybersecurity disclosure obligations, governance oversight, and legal exposure for corporate CISOs.