SolarWinds said its disclosures and public statements at the time of the breach were "appropriate," but did not elaborate. The SEC began investigating the SolarWinds breach in 2021, including whether some companies failed to disclose that they were affected by the breach and allegations of possible insider trading, according to The Washington Post. Spokespeople for the SEC, which does not comment on its investigations, and SolarWinds, did not respond to a request for comment. Just how bad is that hack that hit US government agencies?