SolarWinds Says Russian Group Likely Took Data During Cyber-Attack
The Russia-linked hackers that compromised popular software by the Texas-based firm SolarWinds Corp. last year broke into email accounts and likely took data from the firm.
SolarWinds said it “found evidence that causes us to believe the threat actor exfiltrated certain information as part of its research and surveillance,” according to a regulatory filing on Friday. The hackers “accessed email accounts of certain personnel, some of which contained information related to current or former employees and customers,” the company said.
The filing presents the latest information in a cyber-attack announced in December that the U.S. has attributed to Russia’s foreign intelligence service in which hackers compromised SolarWinds software in order to spy on its users in the U.S. government and private sector. SolarWinds estimates the hackers breached fewer than 100 of its customers using its software, according to the filing. The White House has found that about 100 U.S. companies and nine government agencies were hacked by the Russian cyber-attackers through SolarWinds and other means in the course of their espionage operation.