As a result, according to the order, the company failed to execute a timely response to a ransomware network intrusion that culminated in encryption of computers, exfiltration of data, and business service disruptions. Charges under Exchange Act Section 13(b)(2)(B) and Rule 13a-15(a). The company's cooperation and remedial efforts were acknowledged. Remedies included cease-and-desist and a $2.125m civil penalty. Commissioners Peirce and Uyeda dissented on the grounds that Section 13(b)(2)(B) was designed to establish controls over corporate transactions, not corporate assets. SEC v. SolarWinds Corp., et al. (S.D.N.Y., July 18, 2024) – In ongoing litigation, the district court granted "in large part" the information technology company SolarWinds' motion to dismiss.