That became one of the most significant cyberattacks in history, resulting in nearly 18,000 of its customers receiving a compromised software update, including the U.S. government. However, the company now says fewer than 100 customers were actually hacked through Sunburst. [Related: Here Are 24 Reported Victims Of The SolarWinds Hack (So Far) ] Following the SEC's June 2023 filing of Wells notices against SolarWinds and its then-chief financial officer and chief information security officer, which gave the company and its officials notice that they were subject to an enforcement action, the SEC in October filed a complaint with the U.S. District Court Southern District of New York alleging that SolarWinds and Brown "defrauded SolarWinds' investors and customers through misstatements, omissions, and schemes that concealed both the Company's poor cybersecurity practices and its heightened—and increasing—cybersecurity risks."