Share on LinkedInShare on LinkedIn

ARTICLE · 25 NOVEMBER 2025

SolarWinds Dismissed: What The SEC's U-turn Signals For Cyber Enforcement

A&O Shearman
A&O Shearman
Contributor

A&O Shearman

Introducing A&O Shearman Unparalleled global depth for a changing world. Today more than ever,...

View firm profile
Explore more from A&O Shearman

The Securities and Exchange Commission's (SEC) case against SolarWinds and its chief information security officer (CISO), Timothy Brown, ended abruptly on November 20, 2025, when the SEC agreed to dismiss its remaining claims against SolarWinds with prejudice.

United StatesTechnology

The Securities and Exchange Commission's (SEC) case against SolarWinds and its chief information security officer (CISO), Timothy Brown, ended abruptly on November 20, 2025, when the SEC agreed to dismiss its remaining claims against SolarWinds with prejudice.

The outcome caps a long-running and closely watched legal dispute that began with sweeping fraud and controls allegations tied to SolarWinds' statements about its cybersecurity practices and its disclosures following the breach of its flagship Orion software platform in 2020.

The dismissal comes amid a broader recalibration of enforcement priorities in the new administration, including the SEC's announcement earlier this year that it will focus on public issuer "fraudulent disclosure" relating to cybersecurity—signaling a pivot away from actions based on more nuanced allegations of disclosure deficiencies. The SEC's decision to abandon the SolarWinds case altogether is the most pointed example yet of that

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from