Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallSome links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
The SEC dismissed its remaining civil enforcement claims against SolarWinds Corp. and chief information security officer Timothy G. Brown on November 20, 2025. The dismissal was with prejudice, ending this litigation, but it was not a trial verdict declaring SolarWinds’ cybersecurity disclosures accurate or finding that Brown and the company were legally innocent.
The decision closes a closely watched case arising from the SUNBURST supply-chain attack. It also narrows, rather than eliminates, the risks public companies face when they describe cybersecurity controls, disclose incidents, and report material information to investors.
What happened to the SEC’s SolarWinds case?
The SEC and SolarWinds and Brown jointly stipulated to dismiss the remaining claims. The SEC described the decision as one made “in the exercise of its discretion” and cautioned that the dismissal did not necessarily represent its position in other cases. The SEC’s dismissal notice confirms that the case ended on November 20, 2025.
“With prejudice” means the same claims cannot simply be revived in this action. It does not bar unrelated future enforcement based on different facts or legal theories, and it does not automatically resolve private shareholder suits, insurance disputes, employment matters, or other regulatory inquiries connected to SolarWinds.
#1 Best Overall
- This 4-3/8" x 7" small size, 1 subject notebook has 80 double-sided college ruled sheets that fight ink bleed and are perforated for easy tear out. Perfectly sized for when you're on the go.
- Tough pockets resist tears and hold loose sheets and notes. Durable plastic water-resistant front cover helps protect your notes and our Spiral Lock wire helps prevent snags on clothes and backpacks.
- All the benefits of our larger notebooks in a smaller, easy to carry size. Sheets measure 4-3/8" x 7 when torn out.
- Available in Seaglass Green
- LASTS ALL YEAR. GUARANTEED!*
The most accurate description is therefore: the SEC’s case ended without a trial or merits judgment.
Why the case mattered to investors
The SEC filed the enforcement action in October 2023. Its allegations covered conduct dating back at least to SolarWinds’ October 2018 initial public offering and continuing through the company’s disclosure of the SUNBURST attack in December 2020.
The agency alleged that SolarWinds:
- Overstated the strength of its cybersecurity practices;
- Used generic or hypothetical risk disclosures despite allegedly knowing about specific weaknesses;
- Failed to disclose cybersecurity risks and developments accurately; and
- Violated securities-law reporting, antifraud, and internal-control requirements.
The SEC also alleged that Brown personally violated or aided and abetted certain violations. For investors, the case raised a broader question: when do a company’s cybersecurity statements become securities disclosures that can create liability if they conflict with what management knows internally?
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →The SEC alleged that SolarWinds’ stock price fell approximately 25% over the two days following its December 14, 2020 disclosure and approximately 35% by the end of December. Those figures were allegations reported by the SEC, not proof that the disclosure alone caused every part of the decline or that investors were legally defrauded.
Rank #2
- A classroom classic: this 6-pack of 1-subject spiral notebooks helps you identify your subjects at a glance with color-coding efficiency; color assortment may vary
- The right ruling: these 8" x 10-1/2", college-ruled notebooks fit more writing per page than wide-ruled sheets; each notebook provides 70 double-sided sheets with red margin lines
- Perect perforation: Dependable micro-perforated sheets retain your must-have notes but still detach cleanly when you’re ready to revise
- Glide from page to page: Your favorite gel or ballpoint pens will move effortlessly across these smooth pages for A+ notes with minimal ink bleeding or show-through
- 3-Hold punched: Every notebook comes 3-hole punched to fit a standard binder; take along one notebook or several to save extra trips to the locker
What was the SUNBURST attack?
SUNBURST was a sophisticated supply-chain compromise involving SolarWinds’ Orion network-management software. Attackers compromised the software build process and inserted malicious code into legitimate Orion updates distributed to customers.
SolarWinds initially said fewer than 18,000 customers may have installed affected Orion versions. That figure referred to potentially exposed installations, not necessarily organizations that were actively targeted or materially compromised. The attack affected government agencies and private companies and became one of the most consequential software-supply-chain incidents in U.S. cybersecurity history.
Its significance for securities law was not limited to the technical intrusion. The SEC treated the incident as a question of what SolarWinds and its executives knew, what they told investors, how they described security controls, and whether the company’s disclosure and internal-control processes reflected material information.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Most of the SEC’s case had already been dismissed
The November 2025 announcement cannot be understood without the Southern District of New York’s July 18, 2024 ruling. The court substantially narrowed the case and dismissed most of the SEC’s theories, including major portions involving:
Rank #3
- Perfectly sized for when you're on the go, this small 2 subject notebook has 80 double-sided college ruled sheets that fight ink bleed and are perforated for easy tear out
- Tough pockets help prevent tears and hold 6" x 9-1/2" loose sheets and notes. Durable plastic water-resistant front cover helps protect your notes and our Spiral Lock wire helps prevent snags on clothes and backpacks.
- All the benefits of our larger notebooks in a smaller, easy to carry size. Sheets measure 6" x 9-1/2" when torn out.
- Made with SFI certified paper. Notebook is recyclable – just remove the reinforcement tape on the pocket and recycle the rest! Available in Blue (Color May Vary)
- LASTS ALL YEAR. GUARANTEED!*
- SolarWinds’ pre-incident risk disclosures;
- Certain statements made after the incident;
- Securities-fraud theories based on broad cybersecurity representations;
- Internal-control theories treating alleged cybersecurity weaknesses as securities-law internal-control failures; and
- Related aiding-and-abetting claims against Brown.
The court left a narrower claim concerning SolarWinds’ online Security Statement. SolarWinds later identified that as the only remaining SEC claim in its 2024 Form 10-K. Read the 2024 court opinion and SolarWinds’ 2024 Form 10-K.
Why the online Security Statement was important
The remaining claim focused on affirmative statements published on SolarWinds’ website, rather than only on broad risk-factor language in SEC filings. The SEC alleged that the Security Statement misrepresented aspects of SolarWinds’ security program, including areas such as access controls, passwords, secure development, and vulnerability management.
Those allegations were never tested at trial. The dismissal means there is no final merits ruling establishing when a website security statement becomes actionable under the securities laws. The 2024 opinion and the pleadings remain relevant, but the case does not provide a complete precedent on cybersecurity assurances published through websites, trust centers, product pages, or investor materials.
Recommended Free Tools
For companies, the practical warning remains significant: a detailed security promise can create different risks from a carefully qualified description of a known business risk. Public statements should be supportable by contemporaneous records and should not overstate the organization’s controls.
Rank #4
- LASTS ALL YEAR. GUARANTEED! Guarantee is valid for one year from purchase or delivery date, whichever is longer. Does not cover misuse.
- Scan, study and organize your notes with the Five Star Study App. Create instant flashcards and sync your notes to Google Drive to access them anywhere from any device.
- This 5 subject notebook has 200 double-sided, college ruled sheets that fight ink bleed and are perforated for easy tear out. Sheets measure 8-1/2" x 11" when torn out.
- Tough pockets help prevent tears and hold 8-1/2" x 11" loose sheets. Durable plastic front cover is water-resistant to help protect your notes and our Spiral Lock wire helps prevent snags on clothes and backpacks.
- Made with SFI certified paper. Notebook is recyclable – just remove the reinforcement tape on the pocket and recycle the rest! Available in Pacific Blue.
Does the dismissal vindicate SolarWinds?
SolarWinds characterized the dismissal as a vindication and described the outcome as the end of a transformative chapter. That is the company’s characterization.
Legally, the narrower conclusion is more precise:
- The SEC’s case against SolarWinds and Brown is over.
- The remaining claims were dismissed with prejudice.
- No liability judgment was entered against Brown.
- No court found that every SolarWinds cybersecurity disclosure was accurate.
- The SEC did not concede that its theories could never apply in another case.
The distinction matters for investors and corporate boards. A dismissal can end a case without resolving every factual dispute or establishing a broad rule for future enforcement.
What the outcome means for CISOs
Brown’s inclusion in the case had made it a focal point for concern about personal liability for CISOs. The dismissal means the SEC did not obtain a judgment imposing securities-law liability on him. It does not establish that CISOs are immune from lawsuits or enforcement.
Individual exposure can still arise from conduct such as:
Best Value
- BEST-SELLING HARDCOVER JOURNAL: This classic 5.6" x 8" vegan leather journal features a durable and water-resistant cover, 160 college ruled lined pages, inner expandable pocket, sticker labels, ribbon bookmark & elastic closure band.
- PREMIUM PAPER: Made with high-quality, 100 gsm acid-free paper in light ivory color, our journal paper is thicker than average notebooks & note pads, so you can confidently use most pens, pencils, and markers without ghosting and bleed-through.
- LAY FLAT DESIGN FOR WRITING EASE: Our thread-bound, college ruled notebook is designed to lay flat, making it easier to write for both right and left-handed users. It’s the perfect notebook for journaling, note taking and planning.
- INNER POCKET: Includes an expandable inner storage pocket to store appointment cards, notes, receipts, and more. Personalize your journal cover & spine with the sheet of sticker labels included.
- VERSATILE LINED NOTEBOOK: Ideal for journaling, note-taking, planning, or creative writing. Whether you're making a to-do list, capturing ideas, or writing notes, this journal makes a perfect notebook for school, work, or home office.
- Making deliberately false statements;
- Concealing known material risks;
- Failing to escalate material information;
- Misrepresenting facts to investors or regulators; or
- Aiding and abetting corporate violations.
Separate civil, criminal, employment, contractual, fiduciary, and director-and-officer liability theories may also apply depending on the facts. The more defensible lesson for security executives is not that personal risk has disappeared, but that the SEC did not establish its broadest theory in this case.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What public companies should take from the decision
The dismissal does not eliminate cybersecurity disclosure obligations or invalidate the SEC’s public-company cybersecurity rules. Companies still need processes that connect security operations, legal, finance, investor relations, and the board.
Those processes should distinguish between:
- Generic risks and known risks: A boilerplate risk factor may not adequately describe a specific material weakness already known to the company.
- Technical details and business impact: An incident disclosure generally turns on material impact and significance, not on publishing every sensitive forensic detail.
- Known facts and investigation findings: Early statements may be based on incomplete information, but uncertainty does not excuse an objectively false statement.
- Security controls and disclosure controls: Strong technical security and accurate securities disclosures are related but different compliance functions.
- Ordinary-course risk factors and incident disclosures: The existence of general cyber risk does not answer whether a particular incident is material.
The central operational lesson is not “say less.” It is to make public statements accurate, appropriately qualified, consistent with material information known internally, and supported by documentation showing how the company reached its disclosure decisions.
The broader SEC enforcement picture
The SolarWinds dismissal should not be treated as evidence that the SEC has abandoned cybersecurity disclosure enforcement. In 2024, the agency announced charges against four companies over allegedly misleading cyber disclosures involving the SolarWinds-related campaign. Those matters involved different companies and facts and should not be treated as legally identical to the SolarWinds litigation. See the SEC’s 2024 enforcement release.
SEC Commissioners Hester Peirce and Mark Uyeda also criticized aspects of the agency’s SolarWinds-related enforcement approach in an October 2024 statement. Those were commissioner views, not a binding change in law or a formal repeal of disclosure requirements. Read the commissioners’ statement.
SolarWinds case timeline
| Date | Event |
|---|---|
| October 2018 | SolarWinds completed its initial public offering; the SEC’s later allegations began around this period. |
| March–June 2020 | Affected Orion updates were released during the period later identified in company disclosures and court materials. |
| December 2020 | SolarWinds disclosed that Orion products had been compromised in the SUNBURST attack. |
| December 14, 2020 | The company filed an 8-K describing the attack and its ongoing investigation. |
| October 30, 2023 | The SEC filed its enforcement action against SolarWinds and Brown. |
| July 18, 2024 | The court dismissed most of the SEC’s claims, leaving the narrower Security Statement claim. |
| November 20, 2025 | The SEC and defendants jointly stipulated to dismissal with prejudice, ending the case. |
Bottom line for investors and boards
The SolarWinds litigation ended in two stages: the court dismissed most of the SEC’s theories in 2024, and the SEC dismissed the remaining Security Statement claim with prejudice in 2025. That is a meaningful setback for the agency’s approach in this particular case, but it is not a blanket approval of SolarWinds’ disclosures and not immunity for CISOs.
For public companies, the durable takeaway is straightforward: cybersecurity statements still need to be accurate, supportable, and aligned with material information known to the organization. The absence of a final trial ruling leaves uncertainty around website security assurances, while the SEC’s continuing activity against other companies shows that cyber-disclosure risk remains active.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
